Skip to content
Sencai.docs

Your first 30 minutes

By the end of this tutorial you have a verified Sencai account protected by two-factor authentication, an organization you own, a working understanding of what each role grants, and - the part most people find out too late - the plan limits that decide whether you can invite anyone into that organization at all. Allow about 30 minutes, a chunk of it spent waiting for one verification email.

Everything here happens in the application at app.sencai.space. This documentation site is a separate, unauthenticated site.

Before you start

Section titled “Before you start”
  • An email address you can read right now. Sign-up sends a verification link to it - see Create your account.
  • An authenticator app on a phone you control, with its own backup or transfer path already set up. Sencai issues no recovery codes - see Account security.
  • A name for the organization you are about to own - see Organizations & teams.
  • Optionally, a teammate’s email address. Read step 4 before you promise anyone access - see Personal plans.

1. Create and verify your account

Section titled “1. Create and verify your account”

Register at app.sencai.space/auth/register with your first and last name, your email address, and a password of at least 10 characters. Sencai sends a verification link to that address, and you may be prompted to verify it before you can sign in for the first time. Then sign in at app.sencai.space/auth/login.

If you sign up through Google or Microsoft instead, that flow does not collect your name, so your first sign-in lands on a Complete your profile screen asking for it before you can continue.

Creating your account also starts its own 14-day personal trial, separate from any organization’s - see Billing overview for what it is and what happens when it ends.

2. Turn on two-factor authentication

Section titled “2. Turn on two-factor authentication”

Do this before there is anything worth protecting behind it. Go to User profile → Security (/gravity/userprofile), open the Security tab, and select Set up 2FA. Scan the QR code with your authenticator app, then enter the 6-digit code it generates. Two-factor authentication only turns on after that code is confirmed, so a mis-scanned QR code cannot lock you out. From then on, every sign-in asks for a code after your password.

The same tab holds your password change, your list of active sessions with a per-session Sign out, and your email address change. See Account security for all four.

3. Create the organization you own

Section titled “3. Create the organization you own”

Cloud instances, fleet agents, billing, and settings belong to an organization, never to an individual user - so you need one before anything else is useful. From the dashboard, choose to create a new organization and give it a name. A URL-friendly slug is generated from that name and you can edit it before submitting. You become the organization’s Owner automatically, and an organization always keeps at least one Owner.

Open it from your organization list to reach the detail screen, which is organized into Overview, Members, Invitations, Settings, Legal, Billing, and Cloud Accounts tabs. You will use Members and Invitations in step 6.

Today, your new organization also starts its own 14-day trial - on top of the personal one your account started in step 1, and running independently of it. If nobody has put the organization on a paid plan by day 14, creating or changing cloud instances and editing organization settings are blocked until it is - sending invitations is not currently blocked by it. See Organizations & teams and Billing overview.

We’re moving away from organizations themselves having a trial, and from today’s account-wide personal trial, but that hasn’t shipped yet: the decided direction is for a new organization to simply be on the free configuration (one user, five managed resources) until you choose a paid plan, with a free 14-day Plus-tier seat for your own account in that organization instead, granted once per person - see step 4 below for what that will mean once it’s live.

4. Check your plan before you invite anyone

Section titled “4. Check your plan before you invite anyone”

On the free configuration, you can’t invite anyone yet - it’s capped at one user. The organization’s plan is what decides this: the free configuration includes exactly one user and five managed resources, full stop, and creating a second member is refused until an Owner moves the organization to a paid plan. Above that one-user free limit, people are priced on the curve rather than refused - the organization’s plan sets what it pays, based on its managed resources, how much of running them is automated, and the people who need access beyond the allowance that automation includes. A paid organization’s managed resources aren’t capped either - you pay more as you run more; only the free configuration has a hard resource limit (five) too. You change all of it at Settings → Billing (/gravity/organisation/detail?tab=billing).

Your personal plan is a separate axis and doesn’t affect any of this. It governs your own AI allowance and nothing else - it doesn’t cap how many organizations you may own (the only cap left there is one free organization per owner, independent of your personal plan), and once you’re past the free configuration’s one-user limit, no personal plan caps how many members an organization can have either.

The decided direction is for your account to start with a one-time, 14-day free Plus-tier seat in this organization, dropping to Free or continuing as a paid Plus seat billed to the organization depending on whether it’s paid by day 14 - but that isn’t live yet (see step 3 above). Upgrade the organization from Settings → Billing → Plan & seats, or your own plan from your profile with Upgrade my plan (/gravity/profile/checkout/upgrade).

For the numbers, see sencai.space/pricing; for what each tier governs, see Seats & personal plans and Organization plans.

5. Decide which role each teammate gets

Section titled “5. Decide which role each teammate gets”

Roles run, highest to lowest: Owner > Admin > Member > Auditor > Viewer. They are per-organization, so the same person can be an Admin in one organization and a Viewer in another.

The one that catches people is Auditor. It is a read-oriented role scoped toward audit and compliance visibility, and it sits below Member - the name suggests seniority that the role does not carry. Do not grant it expecting Admin-like reach.

Pick the role before you open the invite dialog, and when in doubt start narrower and raise it later; every role change is recorded in the organization’s audit trail either way. See Roles & permissions for exactly what each of the five grants and which one fits a given job.

6. Send the invitation, or stop here

Section titled “6. Send the invitation, or stop here”

If step 4 left you room, invite by email from your organization’s Members or Invitations tab, choosing the invitee’s role at the same time. An invitation grants nothing until it is accepted: until then it appears in the members list marked Pending invitation instead of with a join date. There is no resend action, so if one expires or the email is lost, revoke it and send a new invitation to the same address.

If you have no room on your plan, or nobody to invite yet, you are done anyway. The outcome of this tutorial - a verified, two-factor-protected account, an organization you own, roles understood, limits known - does not depend on this step.

From here, Your first hour with Sencai picks up with connecting a cloud account or enrolling a fleet agent. Read it with the correction from step 4 in mind.

What’s next

Section titled “What’s next”