# Administration

The admin area is where organization admins manage account settings, team members, API access, tags, and subscription. These pages are accessible from the navigation sidebar to users with the Organization Admin role.

## Organization

The Organization page shows your organization's name, when it was created, and its settings: the timezone used for usage reporting, and the default delivery method new partners start with (Webhooks or Polling, changeable per partner afterwards). Organization admins also turn the two-factor requirement on or off from this page.

To update the settings, click **Edit organization**, make your changes, and save.

## Users

### Roles

There are two roles:

- **User** -- can use the platform but cannot manage other users or access admin settings.
- **Organization Admin** -- can invite and remove users, manage API keys, tags, and subscription settings.

### Managing Users

The Users page has three tabs:

- **Active Users** -- all current members of your organization.
- **Invitations** -- pending invitations that have not yet been accepted.
- **Removed Users** -- users who have been removed. You can restore a removed user to give them access again.

### Inviting a User

1. Click **Invite User**
2. Enter the user's email address
3. Select a role -- **User** or **Organization Admin**
4. Click **Send Invitation**

The user receives an email with a link to create their account.

### Editing a User

Click a user from the Active Users list to open the edit panel. You can update:

- **Name** -- the user's display name.
- **Role** -- User or Organization Admin. You cannot change your own role.
- **Notification Preferences** -- toggle email notifications, error notifications, and usage/billing alerts independently.

## Two-Factor Authentication

Two-factor authentication adds a code from an authenticator app to your password at sign-in. Anyone can turn it on for their own account, and an organization admin can require it for everyone.

Set it up from your account settings: scan the QR code with an authenticator app, then enter the six-digit code it shows. Turning it on signs out your other sessions. Replacing an authenticator is the same flow.

You are given ten single-use recovery codes when you finish. Each one gets you in once if your authenticator is unavailable, so store them somewhere safe. They are shown once and cannot be retrieved afterwards, so you have to confirm you have saved them before you can carry on. Account settings shows how many are left and lets you generate a new set, after a confirmation step, which invalidates the old one.

Organization admins can require two-factor authentication for every member from the Organization page. Members without it are asked to set it up on their next request, and cannot turn it off while the requirement is on. You have to set it up on your own account before you can require it of others.

Five incorrect codes in a row locks an account for 15 minutes.

## API Keys

API keys authenticate requests to the Tediware platform API, such as the partner endpoints used to submit data for outbound EDI processing (`/platform/partners/ACME/ts/810`).

The list shows each key's scope. Keys you create here are **standard** and reach your whole organization. **Sandbox** keys are minted for you when you set up a sandbox webhook sink, and cannot reach organization-wide endpoints such as the feed or a resend.

### Creating an API Key

1. Click **Add API Key**
2. Enter a name for the key
3. Click **Submit**

The key is displayed once after creation. Copy it immediately -- it cannot be retrieved later. If you lose a key, delete it and create a new one.

### Managing API Keys

From the API Keys list you can:

- **Edit** -- update the key's name.
- **Delete** -- permanently revoke the key. Any requests using the deleted key will be rejected.

Treat API keys like passwords. Do not share them in code repositories, logs, or unsecured channels.

## Tags

Tags are color-coded labels for organizing items across your workspace -- partners, mappings, flows, and implementations.

### Creating a Tag

1. Click **Add Tag**
2. Enter a name and pick a color
3. Click **Create**

### Editing and Deleting Tags

Click **Edit** on any tag to change its name or color. Click **Delete** to remove it. Deleting a tag removes it from all items it was assigned to.

## Subscription

The Subscription & Billing page shows your current plan and available options. Every plan includes AI features, API access, all X12 transaction sets, and unlimited trading partners. 997 acknowledgments are never billed.

To subscribe or change plans, click the button on the plan you want. Paid plans redirect to Stripe for checkout.

### Managing Your Subscription

Click **Manage Subscription** to open the Stripe billing portal, where you can update payment methods, view invoices, or cancel your subscription.

When you cancel, you retain access to your current plan until the end of the billing period. After that, your organization is downgraded to the Developer tier. If you change your mind before the period ends, you can re-subscribe from the billing portal.

### AS2 Add-on

AS2 is available as an add-on to paid plans. To activate, click **Subscribe to AS2** on the Subscription page. The Developer tier does not support AS2 -- upgrade to a paid plan first.

To remove the add-on, click **Remove Add-on**. Removing it shuts down all existing AS2 connections immediately.
