Security & access control
Secure by default, access by team
Multi-factor authentication with passkeys, team-based permissions and instant offboarding secure every workspace by default — so people see exactly what their teams allow, and nothing more.
Included
Why it matters
Require multi-factor authentication with passkeys or authenticator apps
Grant access by team with tri-state permissions, secure by default
Offboard a person instantly across every workspace they can reach
What's included
Multi-factor authentication
Every password sign-in adds a second proof — a passkey or an authenticator code — belonging to the person, with single-use recovery codes.
Passkeys
Phishing-resistant passkeys using the device’s fingerprint, face or PIN, which a workspace can require.
Team-based permissions
Contribute, view or blocked per functional area, resolved as the superset across teams — with no team resolving to blocked everywhere.
Financial visibility controls
Dedicated permissions strip budget amounts and technician rates server-side for users who should not see money.
Instant offboarding
Disabling a person ends their sessions, refuses password and SSO sign-in and revokes their API keys across every workspace.
SSO & brute-force protection
Per-tenant Google and Microsoft single sign-on, plus throttling on every sign-in path.
Ready to see it in action?
Talk to our team and we'll tailor Xcellerate OPS to how your business works.
Get started for free