Soveryne company logoSoveryne
Settings

Settings

Part ofSet up Soveryne for your organisation

This page explains how to set up and maintain your Command workspace: your organisation profile, departments, single sign-on, the people who have access and their roles, and the look and language of Command.

Most settings are reached from the profile menu: click your name in the top-right corner.

Who uses it

RoleWhat they do here
AdminEverything on this page
Security managerEdits the organisation profile
EveryoneReads the organisation profile, and chooses their own theme and language

Organisation profile

The organisation profile describes your organisation. Command writes every policy from it, so the fuller it is, the more specific your policies are. See Policies.

Who can do thisAdmin and Security manager can edit and save. Only an Admin can use Read my website. Everyone can read the profile.
1
Open the profile menu and choose Organisation. The page shows how complete the profile is.
2
Fill in the Identity card: Organization name, Legal entity, Registration number, Website, Address and Country.
3
Fill in the Governance and contacts card: Sector, Industry / NACE, Headcount, Turnover band, who signs your policies off, Security contact, Data protection officer, the validity period, Policy review cycle and Customer email domain.
4
Choose the Organisation size, or leave Derive from headcount. The size decides which clauses your policies contain.
5
In Organisation description on the right, describe your organisation under the four headings: What the organisation does, Scope of this policy set, Systems and services in scope and Regulatory context. It works like the control editor: type / for headings, lists and callouts.
6
Click Save. Command shows Saved.
The Organisation page with the identity and governance cards and the organisation description

The Customer email domain is the email domain of your staff, for example example.com. Command needs it to publish policies to your staff in Counsel.

Let Command read your website

1
Fill in Website.
2
Click Read my website. Command reads your public website and fills in parts of the profile. Fields it filled in show a small web tag.
3
Check what it filled in, correct it where needed, and click Save.

Command reloads the profile after reading your website. Save anything you typed before you click Read my website.

Note
Partners remove a customer workspace from their partner portal. Remove customer on this page opens that portal.

Departments

Departments decide who receives each policy and who is asked for evidence. People and departments explains how they work and how they protect your people.

Who can do thisAdmin.
1
Open the profile menu and choose Departments.
2
Under Add department, enter a Department name and an optional Description, and click Add department.
3
On the department's card, type a member's Email address and click Add member. Repeat for each member. You can add people before they have an account.
4
To remove a member, click the × next to their address.
5
To change a description, edit it on the card; Command saves when you click elsewhere.
6
To remove a department, click Delete on its card. Its member list is removed with it. Command does not ask for confirmation.
The Departments page with departments, their members and the single sign-on settings

Each member shows where it comes from: Manual for addresses you added.

Single sign-on

The Single sign-on card on the Departments page decides who may sign in to your workspace and which role they get. These settings apply to this workspace only. Single sign-on explains the supported identity providers, who is let in, and the order in which role rules apply.

Who can do thisAdmin.
1
Open the profile menu and choose Departments, and scroll to Single sign-on.
2
Under Identity providers, click a provider to switch it on or off.
3
Under Allowed email domains, enter the domains whose people may sign in.
4
Under Invited people, add exact email addresses, each with a fixed role.
5
Under Automatic role assignment, optionally add rules:
Role claim key: the name of the group or role claim your identity provider sends, for example "groups";
Claim → role: a claim value and the role it gives;
Domain → role: an email domain and the role it gives;
Provider → role: an identity provider and the role it gives. Type the key, click Add mapping, and choose the role in the new row.
6
Click Save. Command shows Single sign-on settings saved.

You can also set up single sign-on in step 3 of the set-up wizard. See Command.

If Command refuses to save, the message says why, for example that a mapping may not assign the admin role, or that a public email domain such as gmail.com cannot be allowed. See the troubleshooting section of Single sign-on.

People and roles

Users & roles lists everyone who has signed in to your workspace, with their role.

Who can do thisAdmin.
1
Open the profile menu and choose Organisation.
2
Under Workspace administration, click Manage access. The Users & roles window opens.
The Users & roles window with people, their roles and their status

People appear here after their first sign-in. Until then, the window says No staff users have signed in yet. They appear here after their first login.

Invite a person

1
Type the person's email address and choose a role.
2
Click Invite, or press Enter. Command shows Invited followed by the address.

The invitation lets that exact address sign in with that role, even when it is not on one of your allowed domains. It appears under Pending invites until the person first signs in. To withdraw it, click Cancel next to it.

Inviting someone does not send them a message from Command. Let them know they can sign in.

Change a person's role

Choose a new role in the Role column. Command saves it at once and shows Saved. See Single sign-on for how a role set here relates to your sign-in rules.

Administrators show their role as text. Their role cannot be changed here, and Admin cannot be given from Command.

Deactivate a person

Click Deactivate next to a person who leaves. They can no longer sign in, even if their email domain is still allowed, and any invitation for their address is removed. Their account is kept, with status Inactive. Click Reactivate to give them access again.

Command does not ask for confirmation.

Click Done to close the window.

See Roles and permissions for what each role may do.

Appearance

Open the profile menu. Under Appearance:

Theme: choose Auto to follow your computer's setting, Light or Dark.
Language: choose EN for English or NL for Dutch. Command shows Language changed to followed by the language.

Command remembers your theme in this browser, so another browser or computer can have its own. Your language is saved for your account and follows you when you sign in on another device.

Workspace language

The workspace language decides the language of AI-written content and chat, and is the default language of Command for everyone who has not chosen their own.

Who can do thisAdmin. Other roles see the options greyed out, with Only an admin can change the workspace language.
1
Open the profile menu and choose Account settings. The Workspace settings window opens.
2
Under Content language, choose English or Nederlands. Command saves at once and shows AI now generates in followed by the language.
3
Click Done.

How Command protects you

Nobody can be given the Admin role from Command, and administrator accounts cannot be changed or deactivated there.
Single sign-on cannot be switched on without limiting who may sign in: an allowed domain or at least one invited person.
Public email services cannot be allowed as a domain.
Single sign-on settings saved in a workspace apply to that workspace only.
Deactivating a person blocks their sign-in and removes their invitation, so they cannot get back in through their domain.
Deleting a department also removes its member list, so it can no longer grant access to anything.
The website reader only reads public web pages.

Troubleshooting

What you seeWhat it meansWhat to do
Fill in the website first.Read my website needs a websiteFill in Website and try again
Could not read the websiteCommand could not read your websiteCheck the address, or fill in the profile yourself
Saving the profile failsYour role cannot save the profileAsk an Admin or Security manager
Add an allowed domain or at least one invite before enabling a provider.A provider cannot be switched on without limiting who may sign inAdd an allowed domain or invite someone
Action failed, or a message such as "an admin role may not be assigned here"The change to a person was refusedCheck that you are an Admin. Admin cannot be given from Command.
Could not save settings (admin only)Only an Admin can change the workspace languageAsk an Admin
← PreviousAudit logNext →Counsel