An organization is a level that lets you manage several Riot workspaces. It gives you a single place to manage your users, settings and domains, without going through each workspace one by one.
💡 Prerequisite: organization management must be enabled on your account. If you don't see the elements described here, contact your account manager or support via the chat.
1️⃣ Manage your workspaces
Create a new workspace directly from the organization.
Find all your workspaces in one place, with search and filters.
Compare their performance against each other.
2️⃣ Manage your users
Invite users in bulk at organization level. Please note: they will have access to all workspaces, both existing ones and those created later.
Invite users to one or more specific workspaces, still from the organization.
Remove a user.
Export your user list in CSV format.
3️⃣ Roles and permissions
Roles are assigned at two levels: for the whole organization, or workspace by workspace.
A global admin has access to everything. Beyond that, each functional area has two roles: an admin role (read and write) and a viewer role (read-only). The areas concerned are:
Users
Awareness
Breaches
Inbox
Settings
Simulation
Sonar
👍 Good to know: this split is what lets you give someone full control of Simulation campaigns without giving them access to Inbox settings. Useful when awareness and operational security are handled by two different teams.
👉 See also Manage my Admins.
4️⃣ Visual identity
Upload a logo specific to your organization.
Enable the organization's visual identity in communications: emails and messages sent to your employees then carry the organization's branding rather than the workspace's.
Choose which workspaces use this visual identity. You no longer have to apply it to all your workspaces or none: each workspace can keep its own branding if needed.
5️⃣ Domains
Add and manage your organization's email domains. A domain declared at organization level becomes available to all your workspaces.
Verify domain ownership via a DNS record or an IP address allowlist.
Configure sending settings domain by domain.
Choose which domains can be used for campaign audiences.
👉 See also Validate a domain.
6️⃣ Albert and directory sync
Two integrations are configured once and for all at organization level, then propagate to all workspaces:
Albert on Slack, Microsoft Teams or Google Chat. You can manage or remove these integrations at any time from the organization.
Directory sync with your identity provider, to populate your users automatically.
7️⃣ Awareness and Simulation across the organization
On the Awareness side, you can define programmes at organization level, build a selection of courses featured in your catalogue, and track completion rates per course from the organization.
👉 How this works in detail is described in Managing awareness across an organization.
On the Simulation side, you can create and run campaigns for the whole organization from a single place, choosing your audience: all employees in the organization, or only certain workspaces.
8️⃣ Analytics
Simulation statistics at organization level.
Detailed results for a given campaign.
An aggregated view of all your workspaces.
A Cyber Score, a single score reflecting your organization's overall security posture.
Key takeaways
The organization sits above your workspaces and centralises users, roles, domains and integrations.
Roles are assigned at organization level or workspace by workspace, with an admin / viewer pair for each functional area.
An invitation at organization level gives access to all workspaces, including those created later.
The organization's visual identity applies to the workspaces of your choice.
Albert, directory sync and domains are configured once and propagate.