> ## Documentation Index
> Fetch the complete documentation index at: https://docs.holos.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Organization

> Manage members, roles, authentication, and object approvals.

Organization settings are managed under **Settings** in the dashboard sidebar. Owners and admins have full access; managers have read-only access to most settings.

<Note>All pages in this section require admin or owner access, except where noted.</Note>

## Members

The [**Member Management**](https://app.holos.io/admin/members) page shows all members in your org with their email, role, and status.

To invite someone:

1. Click **+ Invite** in the top right
2. Enter their email address and select a role
3. They'll receive a magic link to join your org

### Roles

| Role      | Permissions                                                                                                         |
| --------- | ------------------------------------------------------------------------------------------------------------------- |
| `owner`   | Full access including org settings and ownership transfer                                                           |
| `admin`   | Full access excluding ownership transfer                                                                            |
| `manager` | Can create and edit [skills](/dashboard/skills), [captures](/dashboard/captures), and [objects](/dashboard/objects) |
| `member`  | Can view and record captures                                                                                        |

## Authentication & Access

The [**Authentication & Access**](https://app.holos.io/admin/access) page controls how members sign in and how new members are provisioned.

**Authentication settings**

* Toggle which primary and secondary auth methods are allowed
* Require MFA for all users in your org

**User onboarding**

* **Invites**: allow any email or restrict to specific domains
* **JIT Provisioning**: automatically add members who sign in via allowed email domains or SSO connections
* **Access control list**: define the email domains and SSO connections that are permitted

**Automatic role assignments**

* Automatically grant roles based on email domain, SCIM group membership, or SSO connection

## SSO

<Note>SSO is available on enterprise plans.</Note>

The [**SSO**](https://app.holos.io/admin/sso) page manages SAML-based single sign-on connections. Click **+ New connection** to configure your identity provider. Once active, members can sign in through your IdP and are provisioned automatically based on your JIT and role assignment settings.

## SCIM

<Note>SCIM is available on enterprise plans.</Note>

The [**SCIM**](https://app.holos.io/admin/scim) page lets you connect a directory sync provider to automate member provisioning and deprovisioning. Use this to keep your Holos membership in sync with your IdP.

## Object Approvals

The [**Object Approvals**](https://app.holos.io/objects/approvals) queue is where admins review 3D objects before they become available to the org. Each object is inspected in a full 3D viewer and can be approved or rejected.

When flagging an issue, select from the standard categories:

| Issue              | Description                                                |
| ------------------ | ---------------------------------------------------------- |
| Backfaced textures | Geometry normals are inverted                              |
| Large textures     | Texture resolution is excessive for the use case           |
| Off origin         | Object pivot point is misplaced                            |
| Bad thumbnail      | Auto-generated thumbnail doesn't represent the object well |
| Bad orientation    | Object is rotated incorrectly relative to its expected use |
| Other              | Any other issue; add a note when rejecting                 |

Use **A** to approve, **R** to reject, and arrow keys to navigate between objects in the queue.