On this page
Manage insideBase
Manage users, technical access and settings for your team. Check the active workspace before making changes.
Requirements and permissions
The overview and API-key list require management.read; user management requires users.manage. Changing API keys and central settings requires settings.manage; opening the settings page also requires management.read. History requires settings.manage. Personal workspaces have no team management.
Step by step
Open team management
- Open Management in the navigation.
- Check the active workspace and usage overview.
- Choose Users, API keys or Settings for the change you need.
The overview shows team members, contacts, storage usage and shared mailboxes. Usage figures support administration and capacity planning; available data depends on enabled modules.

Manage users
- Open Management → Users and search for the email address before creating an account.
- For an existing account, choose Invite user, enter their email address and select User or App admin. Confirm the invitation.
- To create an account, choose New user. Enter email, first name and last name; check language, timezone and Active status. Enable SSO only only for a configured SSO account.
- To change an existing user, open Edit. The App admin checkbox controls management access. Complete reauthentication if requested.
- Save and check the list. Reopen an existing user if you need to send another invitation or perform an authorized two-factor reset.
Users managed in a primary tenant may be read-only elsewhere; make the change in that primary tenant. If the email address already exists, the application can offer an invitation instead. Transfer shared data, mailboxes, safes and responsibilities before deactivating or removing an account. The last administrator is protected.

Manage API keys
- Open Management → API keys and start creating a key.
- Enter a descriptive name for the integration and select its User. Both fields are required.
- Set an appropriate Expiration date and check Active status. Without an expiration date, the key does not expire automatically.
- Save and store the key securely. Test the integration on the correct product and tenant host with a read request.
- To revoke access, edit the key and deactivate it, or delete it after checking dependent integrations. To rotate it, first create a replacement, update the integration and then deactivate the old key.
An expired key is inactive. Access depends on the selected user and their permissions; this form does not offer individual API permission scopes. Choose an appropriate user. The API guide explains the supported integration contract.

Check change history
- Open Management → History.
- Search for a relevant term and sort the table, for example by date.
- Check the person, action and time. Browse subsequent pages if the entry is not visible.
History helps trace changes; it does not undo them.

Manage settings
- Open Management → Settings.
- Choose the relevant section. Available options depend on the product and enabled modules.
- Record the previous value before changing it. Edit related fields together and check validation messages.
- Save and open the affected feature using a regular user account. Verify that the intended change took effect.

Result
Users can sign in to the intended workspace, technical access has been checked and updated settings work as expected.
Troubleshooting
| Problem | Check and resolve |
|---|---|
| A user is missing | Check search terms, the active filter and selected workspace. |
| An invitation does not arrive | Check the recipient and spam folder; record delivery errors before sending again. |
| The form is read-only | Follow the primary-tenant notice and edit the user there. |
| An API request fails | Check active status, expiration, assigned user, host and user permissions. |
| Saving is rejected | Check required fields, your permissions and protection of the last administrator. |