---
title: "Organisation security"
description: "Manage shared access rules, authentication and security activity across your organisation."
source: "https://docs.aplt.ai/docs/organisation-security-overview"
updated: "2026-10-19T23:23:54.945382+00:00"
product: Autopilot
content_type: documentation
---

# Organisation security

Manage shared access rules, authentication and security activity across your organisation.

Manage how people connect, sign in and keep access across your organisation and its linked dealerships. Use the security centre to set shared rules, respond to access changes and review recorded security activity.

## Who can use these settings?

**You need an Autopilot organisation set up to configure these controls.** Organisation administrators manage them from **Organisation → Security**. A standalone dealership does not have organisation-wide security settings.

The rules apply to the organisation and its linked dealerships. Being a dealership administrator does not, by itself, grant organisation administrator access. Staff may need to follow these rules even though they cannot change them.

## Explore your security features

- [Network access](/docs/network-access/ "Require approved office or company VPN connections before people can access your workspaces.")
- [Authentication & sessions](/docs/organisation-authentication-and-sessions/ "Set inactivity limits, maximum sign-in periods and multi-factor authentication requirements.")
- [Active sessions](/docs/organisation-active-sessions/ "End a member’s browser sessions on all devices while keeping their membership and permissions.")
- [Offboarding](/docs/organisation-offboarding/ "Suspend access temporarily or remove someone from the organisation and its linked dealerships.")
- [Security activity log](/docs/organisation-security-activity/ "Search recorded access, role, invitation, session sign-out and security policy changes.")

## Choose the right control

Use **Network access** to decide which connections are approved. Use **Authentication & sessions** to decide when people must sign in and verify their identity again.

If someone needs a fresh sign-in on all devices, use **Active sessions**. If they should not be able to return, use **Offboarding** to suspend or remove their access. Signing someone out does not remove their permission to sign in again.

Use the **Security activity log** to review the recorded changes and who performed them. This history helps organisation administrators understand changes across linked dealerships.

## Before making changes

Plan office and remote access with your IT provider before enabling network restrictions. Explain sign-in and MFA requirements to your team before tightening authentication rules.

Sensitive security changes require recent identity verification. Follow any verification prompt and check that your change is confirmed. Organisation administrators are subject to the organisation’s access requirements too.

## Looking after your own account?

Your personal account security is separate from managing organisation rules. Use the guides for [passkeys](/docs/manage-your-passkeys/), [authenticator apps](/docs/manage-two-factor-authentication/) and [your active sessions](/docs/manage-active-sessions/) to manage your own account.

If a network requirement is blocking you, start with [I can’t get into my Autopilot workspace](/docs/network-access-help/).