Owners & admins only
Who sees what. What it costs.
As customers added teams and apps, owners asked who can see what, and what it all costs. Admin puts people, access, plans and usage in one place.
Admin · Andes Foods
Each person sees only their own data, or data shared with them.
Illustrative interface rebuilt from CIRO’s apps. Demo company and figures.
What it does
People, access per app, plans, seats and AI credits per person, with caps you set.
- People and accessInvites, groups and access bundles per app.
- Usage you controlAI credits per person, caps, requests and top-ups.
- Private by defaultEach person sees only their data or what is shared.
Apps in this space
The full feature list
Everything in Admin, by name.
13 features, named the way the product names them.
People and accessWho can open what.2 features
- Invites and groupsInvite people and organize them in groups.
- Access bundles per appChoose which apps each person or group can open.
Plans and billingWhat it costs, in one place.2 features
- Plans and seatsChange plans and seats as the team grows.
- One monthly invoiceEvery seat and app on one invoice, with your payment method.
Usage you controlCredits per person, with limits you set.2 features
- Credits per personCredits used this period, by feature and by person.
- Caps, requests and top-upsSet a monthly cap per person; people ask for more and you approve.
Security and administrationIsolated tenants, roles, SSO, two-factor and an audit trail, as implemented.7 features
- Row-level security per tenantEvery database query runs with the organization context set, and the application role cannot bypass it. The product states it on screen: your data is isolated per tenant, never used to train AI models, and encrypted at rest and in transit.
- Organization rolesViewer, Member, Admin and Super Admin, each with a listed set of capabilities, assigned when you invite someone.
- Share any resourceJust me, Everyone in org or Specific people, as Viewer or Editor. Works on dashboards, data sources, views, collections, notebooks, investigations and Studio projects. People outside the organization get an invitation by email.
- Sign-inContinue with Google, GitHub or Microsoft, or email with a one-time code at signup. Two-factor authentication (TOTP) with an authenticator app for sensitive admin actions.
- Sessions15-minute access tokens with rotating 7-day refresh tokens; a reused token revokes the whole session.
- Activity logA filterable feed of workspace events with CSV export.
- Answer guardrailsPersonal data such as emails is masked in AI answers, and prompts and generated SQL are checked before they run.
CIRO AI · November 4, 2026
Join the waitlist before November 4.
Free to start. Or let our team take your ERP live in about four weeks.