For Managers

Velocity has four roles: Developer, Reviewer, Admin, Manager. Admins can do nearly everything — promote people, manage projects, set policy. The Manager role is the narrow set of things that cannot be delegated.

• Billing. Payment method, plan changes, seat counts, invoices, tax IDs.
• SSO configuration. Enable/disable, change IdP, enforce vs optional.
• Org pause and lock. The two big red buttons. Both reversible.
• Manager role transfer. One-way handoff to an existing Admin.
• GDPR delete. Permanent org-wide data nuke. Multi-step confirmation.

Everything else — adding people, archiving projects, setting compliance scanners, configuring backups — an Admin can do. If you're a Manager and find yourself doing routine ops work, promote a deputy to Admin.

Org Settings lives in the bottom-left of the desktop client and at portal.aethernaut.ai on the web. The Manager sees every tab; Admins see all but Billing and SSO.

• People. Invite, role-change, deactivate. Seat count visible at top.
• Projects. Per-project Reviewers, archive, transfer.
• Billing. Plan, payment method, invoices, usage dashboard.
• SSO. SAML/OIDC config, enforcement toggle, break-glass account.
• Security. IP allowlist, domain verification, session timeout.
• Audit. Live feed of every state-changing action across the org.
• Danger Zone. Pause, lock, transfer Manager, GDPR delete.

Three different shut-off mechanisms with different blast radii. Pick the smallest one that solves your problem.

• Pause. Read-only for everyone except the Manager. No new sessions, no builds, no submissions. Existing data untouched. Billing continues. Use during a security incident or a policy review. Unpause at any time.
• Lock. Same as Pause plus Velocity-side enforcement: sign-ins are rejected, the desktop client shows a lock screen, WebSockets are dropped. Use when you suspect credential compromise. Only the Manager can unlock.
• Archive (project-level, not org-level). A project moves to read-only with a 90-day soft-delete window. Admins can archive; only Managers can hard-delete during the window.

The Manager role can be handed off, but only to someone who is already an Admin in your org. This is deliberate friction — we never want a stranger to land on billing.

1. Promote your intended successor to Admin from People.
2. Open Danger Zone → Transfer Manager and select them.
3. Confirm via the email link sent to your address. The successor must also confirm via their email. Both confirmations must complete within 30 minutes.
4. You drop to Admin automatically. The new Manager owns billing immediately.

Every org has a rolling 3-day Time Machine. We snapshot org state every hour for the first 72 hours and retain the standard 90-day backups behind it. The 3-day window is the one you reach for when something just went wrong.

Open Danger Zone → Time Machine. You'll see a timeline of hourly snapshots. Select one, preview the diff against current state (people, projects, settings, role assignments), and apply. The rewind is org-wide and atomic — it's not a per-project rollback.

Time Machine does not touch session working copies or submitted builds — those have their own project-level rollback. It rewinds org configuration: roles, policies, integrations, SSO. Useful when an Admin makes a sweeping change you need to undo cleanly.

Billing → Usage shows the live picture: current paid seats, active seats this billing period, and projected next invoice. A seat is consumed by any accepted invite, regardless of whether that user signed in this month.

Two patterns worth knowing. First: deactivate departing employees promptly — a deactivated seat is reclaimable the same day. Second: if you're consistently under your seat count, drop it from the portal; the change applies next billing cycle.

Usage also covers storage and compute on the cloud tier. We bill seats only — storage and compute sit inside the per-seat envelope unless you hit the outsize-org thresholds documented on the Pricing page. You'll see a banner long before you cross them.