{"id":3382,"date":"2026-08-12T12:51:17","date_gmt":"2026-08-12T11:51:17","guid":{"rendered":"https:\/\/icomply.pm\/administration-access\/"},"modified":"2026-08-21T09:34:40","modified_gmt":"2026-08-21T08:34:40","slug":"administration-access","status":"publish","type":"page","link":"https:\/\/icomply.pt\/en\/documentation\/administration-access\/","title":{"rendered":"Administration &#038; Access"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"3382\" class=\"elementor elementor-3382 elementor-3090\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d0756dd e-flex e-con-boxed e-con e-parent\" data-id=\"d0756dd\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-7547ba8 e-con-full e-flex e-con e-child\" data-id=\"7547ba8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b221225 elementor-icon-list--layout-inline elementor-align-start elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"b221225\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Documentation<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">\/<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><span style=\"color: #c3ccd8\">Administration &amp; access<\/span><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7bf238f elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"7bf238f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Reference \u00b7 11 mins<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7400c10 elementor-widget__width-initial elementor-widget elementor-widget-image-box\" data-id=\"7400c10\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">Administration &amp; access<\/div><p class=\"elementor-image-box-description\">Profiles, permissions, SSO, entities, billing and organisation settings \u2014 everything an administrator needs to know.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b7ae72a e-flex e-con-boxed e-con e-parent\" data-id=\"b7ae72a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1b6d7c6 content_34535345 elementor-widget elementor-widget-text-editor\" data-id=\"1b6d7c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>iComply manages sensitive compliance data, so the access model is deliberately granular. This page covers the configuration that an administrator sets up once and reviews periodically. <\/p><h2 id=\"perfis\">User profiles<\/h2><p>Five profiles cover the vast majority of cases. Always apply the principle of <strong>least privilege<\/strong>: start with the most restrictive profile and move up if necessary. <\/p><ul><li><strong>Administrator <\/strong>\u2014 organisation settings, users, entities, authentication, billing and all domains. Keep the number to a minimum (ideally two, so you don\u2019t lose access). <\/li><li><strong>Domain Manager<\/strong> \u2014 full control over assigned domains: controls, risks, evidence, audits and reports. No access to billing or users. <\/li><li><strong>Contributor <\/strong>\u2014 carries out assigned tasks and maintains records for the controls for which they are responsible. They do not alter the control framework. <\/li><li><strong>Auditor<\/strong> \u2014 reviewing controls, evidence, findings and reports within the defined scope. They may record findings if the audit is assigned to them. <\/li><li><strong>Reading <\/strong>\u2014 for reference only, typically for management or stakeholders.<\/li><\/ul><h2 id=\"ambito-acesso\">\u00c2mbito de acesso<\/h2><p>A profile determines the \u2018<em>what<\/em>\u2019; the scope determines the \u2018<em>where<\/em>\u2019. Each user may be restricted by: <\/p><ul><li><strong>Domain<\/strong> \u2014 e.g. Privacy and Ethics only. <\/li><li><strong>Legal entity<\/strong> \u2014 e.g. only the Portuguese subsidiary. <\/li><li><strong>Organisational unit<\/strong> \u2014 e.g. IT only. <\/li><li><strong>Validity period <\/strong>\u2014 access with an expiry date, useful for consultants and external auditors.<\/li><\/ul><p>This arrangement makes it possible, for example, to assign an external consultant the role of Security Domain Manager within a single organisation for a period of three months.<\/p><h2 id=\"convites\">Invite and deactivate users<\/h2><p>In <code>Administra\u00e7\u00e3o \u2192 Utilizadores<\/code>, send an invitation by email. The invitation expires if it is not used. When an employee leaves, <strong>deactivate<\/strong> their account rather than deleting it: deactivation blocks access but preserves the activity log, which serves as audit evidence. Permanent deletion should only be used in response to a request for erasure under the GDPR.   <\/p><h2 id=\"autenticacao\">Authentication and MFA<\/h2><p>In <code>Administra\u00e7\u00e3o \u2192 Autentica\u00e7\u00e3o<\/code>, you can:<\/p><ul><li><strong>Enforce MFA<\/strong> for all users or only for privileged accounts. We recommend it for everyone. <\/li><li><strong>Set session policy <\/strong>\u2014 duration and time-out on inactivity.<\/li><li><strong>Restrict by IP <\/strong>\u2014 list of authorised ranges, on plans that support this feature.<\/li><\/ul><h3>SSO &#038; SCIM<\/h3><p>On Enterprise plans, you can connect your identity provider via <strong>SAML 2.0<\/strong> or <strong>OIDC<\/strong>, and automatically provision users via <strong>SCIM<\/strong>. With SCIM enabled, user join and leave events within the organisation are automatically reflected on the platform without the need for manual intervention \u2014 which in itself resolves one of the most common non-compliances identified in access audits. <\/p><p>Typical configuration: map the directory groups to the iComply profiles, and define one group per governance domain.<\/p><h2 id=\"entidades\">Organisations and structure<\/h2><p>In <code>Administra\u00e7\u00e3o \u2192 Entidades<\/code>, the group is modelled as follows: legal entities, countries and units. This determines: <\/p><ul><li>How the scope of domains is applied.<\/li><li>Whether the reports are consolidated or by entity.<\/li><li>What regulatory obligations apply to each party (NIS2, CSRD and Pay Transparency thresholds vary by size and sector)?<\/li><\/ul><h2 id=\"registos\">Platform audit logs<\/h2><p>All relevant actions are recorded in an immutable log: who, what, when and from where. This includes authentication, changes to controls, the uploading and replacement of evidence, changes to permissions and data exports. <\/p><p>This log is evidence in itself \u2014 it fulfils the logging and monitoring requirements of ISO 27001 and the equivalent requirements of NIS2 and DORA. It can be exported in <code>Administra\u00e7\u00e3o \u2192 Registos<\/code>. <\/p><h2 id=\"notificacoes\">Notifications<\/h2><p>In <code>Administra\u00e7\u00e3o \u2192 Notifica\u00e7\u00f5es<\/code>, configure what is sent and to whom: assigned tasks, records due to expire, controls under review, new findings, CAPA with an imminent deadline, and periodic summaries for senior management. A common mistake is to notify everyone of everything \u2014 the result is that nobody reads it. Start by keeping it limited.  <\/p><h2 id=\"faturacao\">Billing and subscription<\/h2><p>Under <code>Administra\u00e7\u00e3o \u2192 Subscri\u00e7\u00e3o<\/code>, you can view the active plan, the domains included, the users currently using the service, and the add-ons you have subscribed to. You can: <\/p><ul><li>Add domains or users via self-service, with immediate effect.<\/li><li>Switch between monthly and annual billing.<\/li><li>View and download invoices.<\/li><li>Set the billing details and financial contact details.<\/li><\/ul><p>Changes are prorated over the current billing cycle. See <a href=\"https:\/\/icomply.pt\/pt\/precos\/\">Pricing <\/a>for details of plans and add-ons. <\/p><h2 id=\"dados\">Data, export and retention<\/h2><ul><li>Hosting \u2014 data is hosted within the EU. For Enterprise plans, a specific region can be specified. <\/li><li><strong>Export <\/strong>\u2014 you can export controls, records, risks and reports at any time; the data belongs to you.<\/li><li><strong>Retention <\/strong>\u2014 set retention policies in line with your legal obligations.<\/li><li>Backups \u2014 daily, with retention and tested recovery. See the <strong><a href=\"https:\/\/icomply.pt\/pt\/centro-de-confianca\/\">Trust Center<\/a><\/strong>. <\/li><\/ul><h2 id=\"revisao\">Regular review of access points<\/h2><p>Schedule a review of access to the platform itself \u2014 quarterly is a good frequency. Check that: <\/p><ul><li>There are no active users who have left the organisation.<\/li><li>No temporary access has extended beyond the scheduled date.<\/li><li>The number of directors remains very low.<\/li><li>The profiles correspond to current roles, not previous ones.<\/li><\/ul><p>This review is, in itself, an audit that you can record in iComply \u2014 with the audit report generated by the platform serving as the supporting evidence.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-58c9edc e-con-full max_w_280 e-flex e-con e-child\" data-id=\"58c9edc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d556a85 elementor-widget__width-inherit elementor-widget elementor-widget-table-of-contents\" data-id=\"d556a85\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;headings_by_tags&quot;:[&quot;h2&quot;],&quot;exclude_headings_by_selector&quot;:[],&quot;marker_view&quot;:&quot;bullets&quot;,&quot;icon&quot;:{&quot;value&quot;:&quot;&quot;,&quot;library&quot;:&quot;&quot;},&quot;min_height&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:0,&quot;sizes&quot;:[]},&quot;min_height_tablet_extra&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"table-of-contents.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tOn this page\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__d556a85\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<svg class=\"elementor-toc__spinner eicon-animation-spin e-font-icon-svg e-eicon-loading\" aria-hidden=\"true\" viewBox=\"0 0 1000 1000\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M500 975V858C696 858 858 696 858 500S696 142 500 142 142 304 142 500H25C25 237 238 25 500 25S975 237 975 500 763 975 500 975Z\"><\/path><\/svg>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dec3b38 e-con-full e-flex e-con e-child\" data-id=\"dec3b38\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7478554 elementor-widget__width-inherit elementor-widget elementor-widget-image-box\" data-id=\"7478554\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">Do you need SSO or multi-organisation support?<\/div><p class=\"elementor-image-box-description\">We set up SSO, SCIM and the group structure with your IT team.\n\n<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6e081e2 elementor-align-justify elementor-widget__width-inherit elementor-widget elementor-widget-button\" data-id=\"6e081e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/icomply.pt\/en\/contact\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Talk to the team<br \/><\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c931611 e-flex e-con-boxed e-con e-parent\" data-id=\"c931611\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-550790b elementor-widget elementor-widget-heading\" data-id=\"550790b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Continue reading\n<\/h3>\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-33ff7bf e-con-full e-grid e-con e-child\" data-id=\"33ff7bf\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<a class=\"elementor-element elementor-element-091f118 e-con-full e-flex e-con e-child\" data-id=\"091f118\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\" href=\"https:\/\/icomply.pt\/en\/documentation\/api-integrations\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-40488bc elementor-widget__width-inherit elementor-widget elementor-widget-image-box\" data-id=\"40488bc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">API &amp; integrations<\/div><p class=\"elementor-image-box-description\">REST API, webhooks and integrating iComply with your stack.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-5782bb4 e-con-full e-flex e-con e-child\" data-id=\"5782bb4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\" href=\"https:\/\/icomply.pt\/en\/documentation\/first-steps\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9ac23b3 elementor-widget__width-inherit elementor-widget elementor-widget-image-box\" data-id=\"9ac23b3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">First steps<\/div><p class=\"elementor-image-box-description\">Set up your organisation, invite users and launch your first domain.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t<a class=\"elementor-element elementor-element-4ec75b6 e-con-full e-flex e-con e-child\" data-id=\"4ec75b6\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\" href=\"https:\/\/icomply.pt\/en\/trust-center\/\">\n\t\t\t\t<div class=\"elementor-element elementor-element-620d8bd elementor-widget__width-inherit elementor-widget elementor-widget-image-box\" data-id=\"620d8bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><div class=\"elementor-image-box-title\">Trust Center<\/div><p class=\"elementor-image-box-description\">How your data is protected at iComply.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Documentation \/ Administration &amp; access Reference \u00b7 11 mins Administration &amp; access Profiles, permissions, SSO, entities, billing and organisation settings \u2014 everything an administrator needs to know. iComply manages sensitive compliance data, so the access model is deliberately granular. This page covers the configuration that an administrator sets up once and reviews periodically. User profiles [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":2895,"menu_order":5,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_ice_seo_score":0,"_ice_review":"","footnotes":""},"class_list":["post-3382","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages\/3382","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/comments?post=3382"}],"version-history":[{"count":5,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages\/3382\/revisions"}],"predecessor-version":[{"id":3824,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages\/3382\/revisions\/3824"}],"up":[{"embeddable":true,"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/pages\/2895"}],"wp:attachment":[{"href":"https:\/\/icomply.pt\/en\/wp-json\/wp\/v2\/media?parent=3382"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}