# Configure

This section covers setting Blink up for your team in the Blink console: who can sign in, what they can reach, and the settings that apply across your whole server.

## Where settings live

The console sidebar groups settings by how far they reach:

- **Organization**: settings for the organization you are working in. **Team**, **Groups**, **Roles**, **Enrollment** and **Organizations**.
- **Instance**: settings for your whole Blink server and every organization on it. **Users**, and **Instance** with its tabs **Roles**, **Organizations**, **Settings**, **License**, **Identity**, **Certificates**, **Security**, **Diagnostics** and **Activity**.
- **You**: your own **Account**, with your two-factor setup and passkeys.

You only see the pages and tabs your permissions and your plan allow.

## People and access

- [Add and manage users](/configure/users/): create accounts, send invite links, give roles, disable users and reset sign-in.
- [Manage organizations and teams](/configure/organizations/): one organization per customer, and who is on each team.
- [Roles and permissions](/configure/roles/): the Owner role, the starter roles, custom roles and every permission.
- [Limit access with groups](/configure/groups/): give people access to some devices only.
- [Sign-in and two-factor authentication](/configure/sign-in-and-two-factor/): authenticator apps, passkeys, recovery codes and signing out everywhere.

## Security

- [Security settings](/configure/security-settings/): join-code format, sign-in lifetime, high-risk confirmations, fleet limits, rate limits, bans, trusted networks and the Support session timeout.
- [Restrict access by IP address and country](/configure/ip-and-country-rules/): limit where the console can be used from and where each organization's Access devices connect from.
- [Owner alerts and webhooks](/configure/alerts/): security alerts in the console and in your chat or monitoring tool.

## Instance settings

- [Choose the name customers see](/configure/technician-name/): how the Support banner names your technicians.
- [Recording storage and log levels](/configure/recordings-and-logs/): retention of recordings and logs, and turning up an agent's logging.
- [HTTPS certificates](/configure/certificates/): what the Certificates page does.
- [Understand your plan and its limits](/configure/plans-and-limits/): Blink Core and Blink Pro, technician seats, Access devices and what changes when your plan does.
- [Check and renew your license](/configure/license/): license status, renewal, grace and lapse.

## A typical setup order

1. [Create your organizations](/configure/organizations/#create-an-organization), one per customer.
2. Decide on roles. The starter roles **Admin**, **Technician** and **Viewer** cover most teams; [create custom roles](/configure/roles/#create-a-role) where they don't.
3. [Create users](/configure/users/#create-a-user-and-send-an-invite) and give them roles.
4. If some people should only reach some devices, [set up groups](/configure/groups/).
5. Review the [security settings](/configure/security-settings/), add your office network to the [allowlist](/configure/security-settings/#allowlist), and set up an [alert webhook](/configure/alerts/#send-alerts-to-a-webhook).
6. If the console or your Access devices should only be reachable from known networks, [set up IP and country rules](/configure/ip-and-country-rules/). Add your own office or VPN address first.

For installing Blink, activating your license and enrolling devices, see [Install](/install/).

:::note
Can't find what you need? <button type="button" data-blink-ask class="blink-inline-ask">Ask the AI assistant</button> or contact [IZT](https://izt.app).
:::