​

MFA Policies

Multi-Factor Authentication (MFA) adds an extra layer of security to your Meteroid account by requiring a one-time verification code in addition to your password when signing in. 💡 Note: This feature is only available on the Enterprise Plan.

​

Enable MFA

To enable MFA, navigate to Settings > Security and click Enable.Then:

• Scan the QR code using your preferred authentication application (such as Google Authenticator).
• Enter the verification code displayed by your authentication app.
• Click Confirm to activate MFA.

Once enabled, users will be required to enter both their password and a verification code generated by their authentication app each time they sign in to Meteroid. 💡 Important: Save your recovery code in a secure location. This code is displayed only once during the setup process and cannot be retrieved or sent again. It can be used to regain access to your account if you lose access to your authentication app.

​

Disable MFA

To disable MFA, go to Settings > Security, click Actions > Disable two-factor authentication, then enter your password to confirm the operation. Once disabled, users will only need their password to sign in to Meteroid.

​

Role-Based Access Control (RBAC)

RBAC allows you to control what each member of your organization can view and manage within Meteroid. By assigning roles with specific permissions, you can ensure that each user only has access to the features required for their responsibilities. To manage roles, navigate to Settings > Security > Roles.

​

Default Roles

By default, Meteroid provides two built-in roles:

• Owner
• Member

These default roles cannot be modified or deleted.

​

Creating a Custom Role

To create a new role, click New Role. When creating a role, define:

• Role name, for example RevOps, Finance, or Support.
• Permissions, specifying which sections of Meteroid the role can access and which actions members can perform. Permissions can be configured for areas such as:
  • Customers
  • Billing
  • Product Catalog
  • Analytics
  • Alerts
  • Settings & Integrations
  • Members
  • Roles
  • Organization

This allows you to tailor access to the responsibilities of each team/member.

​

Assigning a Role

Once a role has been created, it can be assigned to members of your organization. To assign or update a role, navigate to Settings > Members, click the three-dot menu next to the desired member, then select Change role. The new permissions take effect immediately after the role is assigned.

​

Security Log

The Security Log provides an audit trail of security-related events that occur within your Meteroid workspace. It helps administrators monitor account activity, investigate incidents, and ensure compliance with internal security policies. To access the Security Log, navigate to Settings > Security > Security Log. The Security Log records events such as user sign-ins and authentication events, Role assignments and permission changes and other security-related actions performed within the workspace For each event, Meteroid records key information such as the event type, the user who performed the action, and the date and time it occurred.

​

Audit Log

The Audit Log provides a complete, historical trail of all actions occurring within your Meteroid tenant. To access the audit log, navigate to Settings > Audit Log. The ledger records every state change and event, identifying whether the action was performed by an administrator, or automatically. For example, the following events are tracked:

• Customer Modifications: Profile creation, edits to customer details…
• Invoice Lifecycle: Automated generation invoices, status changes…
• Communication & Notifications: Delivery status of all system-generated and automated transactional emails sent to Customers…
• Subscription Operations: Plan upgrades/downgrades, cancellations…