Organisation security
Manage shared access rules, authentication and security activity across your organisation.
Shared rules. Clear access.A safer organisation.
Manage how people connect, sign in and keep access across your organisation and its linked dealerships. Use the security centre to set shared rules, respond to access changes and review recorded security activity.
Who can use these settings?
You need an Autopilot organisation set up to configure these controls. Organisation administrators manage them from Organisation → Security. A standalone dealership does not have organisation-wide security settings.
The rules apply to the organisation and its linked dealerships. Being a dealership administrator does not, by itself, grant organisation administrator access. Staff may need to follow these rules even though they cannot change them.
Explore your security features
Network access
Require approved office or company VPN connections before people can access your workspaces.
Authentication & sessions
Set inactivity limits, maximum sign-in periods and multi-factor authentication requirements.
Active sessions
End a member’s browser sessions on all devices while keeping their membership and permissions.
Offboarding
Suspend access temporarily or remove someone from the organisation and its linked dealerships.
Security activity log
Search recorded access, role, invitation, session sign-out and security policy changes.
Choose the right control
Use Network access to decide which connections are approved. Use Authentication & sessions to decide when people must sign in and verify their identity again.
If someone needs a fresh sign-in on all devices, use Active sessions. If they should not be able to return, use Offboarding to suspend or remove their access. Signing someone out does not remove their permission to sign in again.
Use the Security activity log to review the recorded changes and who performed them. This history helps organisation administrators understand changes across linked dealerships.
Before making changes
Plan office and remote access with your IT provider before enabling network restrictions. Explain sign-in and MFA requirements to your team before tightening authentication rules.
Sensitive security changes require recent identity verification. Follow any verification prompt and check that your change is confirmed. Organisation administrators are subject to the organisation’s access requirements too.
Looking after your own account?
Your personal account security is separate from managing organisation rules. Use the guides for passkeys, authenticator apps and your active sessions to manage your own account.
If a network requirement is blocking you, start with I can’t get into my Autopilot workspace.