Skip to main content

Admin & Tenants

The Admin & Tenants module is the platform-level workspace for tenant administrators — the people who run an ORKSTRA tenant for their firm.

Overview​

Tenants are fully isolated from each other. Within a tenant, the admin manages companies (legal entities), users, roles, branding, billing, security policy, and integrations.

Screenshot: Tenant admin dashboard with company list, user count, license status

Key concepts​

Tenant. The top-level container — your contracting firm. Provisioned by ORKSTRA at sign-up.

Company. A legal entity within the tenant — UAE LLC, KSA branch. Has its own currency, tax registration, address.

Tenant branding. Logo, primary color, custom domain (Premium), email templates.

Tenant settings. Default time zone, default locale, allowed file types, max project size, fiscal year start.

Tenant license. Edition (Starter / Professional / Premium / Enterprise), seat count, module access, renewal date.

Tenant data export. On-demand export of all tenant data (GDPR-style) as ZIP of CSV/JSON.

Tenant suspension / termination. Suspended tenants are read-only. Terminated tenants have a 90-day grace period before data deletion.

Step-by-step: add a company​

  1. Admin → Companies → New.
  2. Fill in legal name (AR + EN), trade license number, tax registration, address, currency.
  3. Upload logo and trade license PDF.
  4. Save. Users can now be assigned roles on the new company.

Step-by-step: customize branding​

  1. Admin → Branding.
  2. Upload logo (SVG preferred), favicon.
  3. Pick primary and accent colors.
  4. Customize email template header / footer.
  5. (Premium) Set custom domain — DNS instructions provided.
  6. Save — branding propagates within 5 minutes.

Step-by-step: invite a user​

  1. Admin → Users → Invite.
  2. Enter email, name (AR + EN), job title.
  3. Assign initial roles per company.
  4. Click Send invite. The user receives an activation email.

Step-by-step: export all tenant data​

  1. Admin → Data → Export tenant data.
  2. Confirm via re-auth.
  3. ORKSTRA queues an export job; ETA emailed.
  4. Download link valid for 7 days.

Common tasks​

  • Bulk import users: Admin → Users → Bulk import Excel template.
  • Configure SSO: Admin → Security → SSO for SAML 2.0 or OIDC.
  • View tenant usage: Admin → Dashboard for storage, projects, active users.
  • Set fiscal year start: Admin → Settings → Fiscal year.

Troubleshooting​

  • "User can't log in after invite." — Invite link may have expired (72h). Resend.
  • "Branding didn't update." — CDN cache. Force refresh with Ctrl+Shift+R. If still not updated after 10 minutes, contact support.
  • "SSO loop after auth." — Most likely a clock skew between IdP and ORKSTRA. Verify NTP on the IdP.
  • "Custom domain shows certificate error." — DNS propagation delay or wrong CNAME. Verify with dig.

Permissions reference​

PermissionWho needs it
TENANT_VIEWTenant admins
TENANT_SETTINGS_EDITTenant admins
TENANT_BRANDING_EDITTenant admins
TENANT_USER_INVITETenant admins
TENANT_DATA_EXPORTTenant admins, Compliance

See also: RBAC, Admin overview, API & Webhooks.