# Settings

> Organisation settings in Vigilbase OS - organisation details, members, grants, policy, kill switch, notifications, retention and usage.

Source: https://docs.vigilbase.com/os/settings

**Settings** holds your organisation's configuration. Open it from the sidebar or press `g` then `s`. Some sections need a permission; without it, the section says which one.

| Section | What it holds | Permission |
|---|---|---|
| **Organisation** | Name, slug and IDs, your access, and the danger zone | None |
| **Members** | Members, roles and invitations | `org.read` |
| **Grants** | Scoped grants of extra permissions | `org.read` |
| **MFA and passkeys** | A link to your account security in Vigilbase Identity | None |
| **Policy** | The action policy | `policy.read` |
| **Kill switch** | Stop all action execution | None to view |
| **Notifications** | Slack and Microsoft Teams notifications | `notifications.manage` |
| **Retention** | Retention and entitlements | `billing.read` |
| **Usage and spend** | Ingestion allowance, investigations, and volume and cost by connection | `billing.read` |

:::cards
- [Members and grants](https://docs.vigilbase.com/os/settings/members) Invite members, change roles and add scoped grants.
- [Policy and kill switch](https://docs.vigilbase.com/os/settings/policy) Set approval rules and stop executions.
- [Notifications](https://docs.vigilbase.com/os/settings/notifications) Send cases and approvals to Slack or Microsoft Teams.
:::

## Your access

The **Your access** panel under **Organisation** shows what the server resolved from your role and grants: your role, whether multi-factor authentication is required and satisfied in this session, until when your step-up is fresh, your scoped grants and your permissions.

## Account security

Your password, authenticator and passkeys belong to your Vigilbase account, not to OS. Under **MFA and passkeys**, choose **Manage account security** to open Vigilbase Identity.

## Delete the organisation

Only an owner can delete an organisation. The **Danger zone** is at the bottom of **Organisation**.

> [!CAUTION]
> Deleting permanently removes every event, raw evidence object, finding, investigation, entity, credential, export and audit record of the organisation. Members lose access immediately and action execution is halted. Changes already made in your providers are not reverted. This cannot be undone.

:::steps
1. **Choose Delete organisation** in the **Danger zone**.
2. **Type the organisation's slug to confirm.** Optionally enter a reason; it stays in the audit log until the purge completes.
3. **Choose Delete organisation** and confirm it's you.
:::

The page shows the deletion's progress. When it completes, a deletion receipt with a SHA-256 hash is kept.