IP allowlist settings

Language and timezone selects with a live date and number format preview row and a first-day-of-week toggle.

Six permissions across three roles, with the honest custom roles roadmap note.

The email and in app switch matrix with the billing row locked on, honestly.

A plan and usage panel with a current plan row, metered usage bars with per limit notes, a near limit badge, and a policy note.

Profile panel with avatar upload, name and email inputs, a read-only timezone row, and a save bar.

Minimal usage settings page with current plan context and live limits for links, domains, members, and analytics retention.

A SCIM provisioning panel with sync stats, the base URL and masked bearer token, an attribute mapping grid, and deprovisioning options.

Security panel with password row, two factor status, and a ruled active sessions list with per device revoke.

Session control panel with an idle timeout selector, a remember this device toggle, and a sign out all sessions action with its consequences listed.

Verified domain, IdP metadata, and the enforce switch with its full consequence.

Team identity panel with name and identifier fields, a default member role Select, who-can-invite radio rows, and a discoverable toggle with its privacy consequence spelled out.

2FA settings panel with authenticator app, SMS fallback, and backup codes rows plus a workspace-wide require 2FA toggle.