List (org-wide, including org-catalog and partner-catalog policies); create under org or partner catalog; view, update, delete; versions; activate; export/import; policy evaluate
List, create, view, update, delete groups; manage group members (identities)
Dashboard Policies / Groups
Partners
List, create, delete partners
Dashboard Partners
Projects
List (org-wide: org-only projects and partner-linked projects); create org-only or with partners; update partners on partner-scoped projects only; delete
Dashboard Projects
Identities
List, create, update, delete identities; rotate API key; policy attachments on identity
Sign in — Open the sign-in page → enter email and password →
complete MFA if your organization requires it → accept terms if
prompted → dashboard.
Accept terms — Terms modal or page → read → accept → backend
records acceptance → continue (e.g. dashboard).
Join via invitation — Admin sends invite → invitee opens email →
sets password → signs in → dashboard (see
How invitations work).
View and use Drive — Open Drive → select project → browse
folders/files; create folder/file, upload, download, rename, move,
delete; attach policies, run simulate, custody report; share file
(email).
Create transfer request — Transfer Studio → create request →
backend returns upload link → share link with recipient → recipient
uses public upload to
upload.
Manage transfers — Transfers → history and requests →
protect/unprotect, delete transfer, lock-to-org, delete request,
custody report.
Manage policies — Policies → filter by catalog (organization or
partner) → create policy, edit versions, activate version, export/import,
run evaluate.
Manage organization — Organization → users and invites; org
settings (SAML, password rules, etc.); RBAC; data custodians;
network rules.
Public download — Recipient opens download link (UUID) → file
info → download → presigned URL.
Public drive share — Recipient opens share link (token) → file
info → download → presigned URL.
Approve gate — Admin receives email with gate-approve link → open
link (one-time token) → gate-approve API → request approved.
Collect form responses — Enable Forms under Settings → Beta →
create form and fields → publish shareable link → recipient submits
via public form page → review responses in Forms.