Users and access

Business and Business Max support unlimited users with DYCRYPT’s four standard roles. Enterprise can add customizable roles.

Standard role	Responsibility
Platform administrator	Creates and administers DYCRYPT organisations without becoming an organisation member.
Organisation administrator	Manages one organisation, including its users, products, and licences.
Issuer	Works with existing products and manages licence issuance and lifecycle.
Viewer	Reads organisation data without changing it.

Organisation members can protect sign-in with passkeys.

API tokens

Use scoped API tokens for automation instead of a human session. A token can receive read or write access to licences, products, customers, and people, plus read-only access to overview analytics and activity.

Grant only the scopes the integration needs. In particular, user-management write access can create privileged organisation members and must be treated as highly sensitive.

See the Management API for the endpoints a token reaches and the full scope table.

The organisation overview shows licence counts, status, and upcoming expiries. The activity trail records important operator actions such as issuance, revocation, and machine-binding changes.