Security & Access

S3Suite provides multiple layers of security to protect your engineering data, device communications, and team workflows.

---

User Roles

Every user in your organization has a role that controls what they can see and do.

To manage users:

1. Go to Settings → Users
2. Invite new users by email and assign a role
3. Change roles or remove users at any time

Tip: Use the Viewer role for stakeholders who need visibility (e.g., investors, project managers from partner companies) without the risk of accidental changes.

---

Security Tokens

Security Tokens work like encrypted secrets for your project - similar to GitHub Secrets. Use them to store sensitive values that your devices or integrations need.

Common uses:

• API keys for third-party services
• Device authentication passwords
• Endpoint URLs for staging vs. production
• Encryption keys

How it works:

• Tokens are stored encrypted - they are never visible in plain text after creation
• Team members can reference tokens by name without seeing the actual value
• Only Org Admins can create, edit, or delete tokens

To manage tokens:

1. Go to Settings → Security Tokens
2. Click Add Token
3. Enter a name and the secret value
4. Save - the value is encrypted immediately

Note: Once saved, the token value cannot be viewed again. If you lose it, delete the token and create a new one.

---

File Security

Every project has a passkey that controls access to protected file downloads.

How it works:

• When files are shared via download links, the passkey is required to access them
• Rotating the passkey invalidates all previously generated download links
• This gives you a kill switch - if a link leaks, rotate the passkey and all old links stop working

To manage the passkey:

1. Go to Project Settings → Security
2. View or rotate the current passkey
3. After rotation, share the new passkey with authorized recipients

Tip: Rotate your passkey whenever a team member leaves or if you suspect a download link has been shared inappropriately.

---

Audit Trail

S3Suite logs every significant action across your organization.

What is logged:

• File uploads, downloads, and deletions
• Device creation and status changes
• Firmware pushes
• User logins and role changes
• RMA creation and resolution
• Settings changes

Using the audit trail:

1. Go to Settings → Audit Trail
2. Filter by:

- Resource - Files, devices, firmware, etc. - Action - Created, updated, deleted, downloaded - User - Who performed the action - Date range - When it happened

1. Export as CSV for external reporting or compliance documentation

Note: The audit trail is immutable - entries cannot be edited or deleted. This makes it suitable for compliance and quality audit purposes.

---

Notifications

S3Suite delivers in-app notifications for events that need a team member's attention - new tickets, RMA status changes, firmware push results, role changes, vault unallocations, audit log alerts. Open the bell icon in the header or visit /notifications to see the full feed.

• Per-event-type preferences live on your profile settings - mute the ones you don't want to be paged on
• Notifications are scoped to your accessible projects + your role
• Unread count surfaces on the bell icon; mark individual notifications read or "mark all read" from the feed

---

Module Visibility

Not every team needs every feature. Org Admins can enable or disable modules for the entire organization.

To configure:

1. Go to Settings → Modules
2. Toggle individual modules on or off
3. Disabled modules disappear from the sidebar for all users

This keeps the interface clean and focused on what your team actually uses.

Tip: If you are just starting out, enable only Engineering and Manufacturing. Turn on Operations when you begin shipping devices.