Role model
iCompaas uses four built-in roles. Pick the smallest scope that lets the person do their job:
- Owner — full control, including billing and removing other Owners. Keep this list small.
- Admin — manage frameworks, policies, evidence, integrations. No billing.
- Editor — implement controls, upload evidence, run scans. No deletes.
- Auditor — read-only, plus export of audit-ready evidence packs. Ideal for external auditors and your customers' security reviewers.
Single sign-on (SSO)
Enterprise plans support SAML 2.0 (Okta, Azure AD/Entra ID, Google Workspace, JumpCloud). When SSO is enabled we can also auto-provision via SCIM so leavers lose access on day one.
Invitations
Settings → Users → Invite. Each invitation is single-use and expires after 7 days. We never email passwords; invitees set their own at first sign-in.
Audit trail
Every privilege change is recorded under Settings → Audit log. We retain admin actions for the lifetime of the account and ship them to your SIEM if you've connected one.