The Settings page contains organization-level configuration. Only Org Admins can access this page.
Organization Name
Update your organization’s display name. This name appears in the dashboard header, email notifications, and team invitations.
SSO Configuration
Configure Single Sign-On so your team members authenticate through your identity provider instead of username/password. See SSO Integration for a full setup guide.
Supported protocols:
API Keys
API keys authenticate the Policy-as-Code CLI and Python SDK. They are separate from your dashboard login and from the enrollment key.
| Action | Description |
|---|
| New API Key | Create a key with read_write or read_only scope and an optional expiration date |
| Download SDK | Download the charley_policy Python wheel for local installation |
| Delete | Revoke a key immediately — existing sessions using it will get 401 |
ck_live_ — read/write (can apply policy changes)ck_ro_ — read-only (plan/diff only, safe for CI plan steps)
The raw key is shown once at creation. Only a hash is stored. Keys can be identified by their first 12 characters shown in the dashboard.
Enrollment Key
The enrollment key is a long-lived credential used by Agent Charley to authenticate device registrations during MDM deployment. It is separate from user accounts and API keys.
| Action | Description |
|---|
| Generate | Create a new enrollment key (shown once — copy immediately) |
| Rotate | Generate a new key (invalidates the old one immediately) |
| Revoke | Delete the key entirely (blocks all new enrollments until a new key is generated) |
Rotating or revoking the enrollment key will not disconnect already-enrolled devices, but any new enrollments using the old key will fail.
Danger Zone
Delete Organization
Permanently deletes your organization, all members, all devices, and all telemetry data. This action is irreversible.
You must type your organization name to confirm deletion. 
