> ## Documentation Index
> Fetch the complete documentation index at: https://docs.get2dial.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Account and access

> How sign-in, roles, and workspace-wide security policy fit together, and what to set up before connecting telephony.

This group covers everything that decides who can get into your workspace, what they can do
once they're in, and how strictly you enforce that. Nothing else in Get2Dial works until people
can sign in, so most of it is worth setting up before you connect telephony.

## How it fits together

Three layers, each optional except the first:

1. **Identity** — every person needs a [user account](/account/invite-users) with a
   [role](/account/roles-and-permissions) that sets their starting capabilities.
2. **Workspace-wide policy** — on top of individual credentials, you can require
   [multi-factor authentication](/account/multi-factor-authentication), require
   [single sign-on](/account/single-sign-on), and set a
   [session policy](/account/session-policy) for idle timeouts and concurrent sign-ins. These
   apply to every user in the workspace, not per person.
3. **Capacity and oversight** — [plans and entitlements](/account/plans-and-entitlements) set
   what your workspace can do, [usage](/account/usage-and-limits) shows how much of it you're
   using, the [audit log](/account/audit-log) records who changed what, and
   [agreements](/account/agreements) tracks the legal agreements between your organization
   and Get2Dial.

A new workspace needs layer 1 to function. Layers 2 and 3 are there when you need them — most
commonly during a security review or once the team grows past a handful of people.

## Common tasks

<CardGroup cols={2}>
  <Card title="Invite users" href="/account/invite-users" />

  <Card title="Change a user's role or capabilities" href="/account/roles-and-permissions" />

  <Card title="Turn on multi-factor authentication" href="/account/multi-factor-authentication" />

  <Card title="Require single sign-on" href="/account/single-sign-on" />
</CardGroup>

## Learn more

<CardGroup cols={2}>
  <Card title="Roles and permissions" href="/account/roles-and-permissions" />

  <Card title="Plans and entitlements" href="/account/plans-and-entitlements" />
</CardGroup>