Roles, tenants and deployment modes

Invoiceflair knows two levels: the tenant — an account with its data — and the installation, meaning the operation of the service itself. In the public portal there is also the anonymous visitor, who can use eight of the ten tools at full scope.

The roles within a tenant

Role	May
Owner	manage the plan, members, master data, invoice issuers, number ranges and API keys
Member	work with the tools, use the archive, create and finalise invoices

A withdrawn right takes effect immediately — not at the next sign-in. Membership is read afresh on every request.

The installation is not a tenant role

Whoever operates the service has access to administration on the command line, and thus to keys, plans and emergency access.

Operations cannot see tenant content through the interface

There is no administrator role that can look inside a tenant. That is a deliberate boundary, not a missing feature.

Cloud or Enterprise

The same application; one difference in deployment mode:

	Cloud (www.invoiceflair.com)	Enterprise (your own installation)
Sign-in	magic link by email only, no password	password in addition to the magic link
Plan limits	per plan (Free, Startup, Team, Business)	none — every tenant is unlimited
Usage log	on	can be switched off
Uploaded files and results	stored for up to 30 days	default off
Third-party analytics	integrated	not integrated
Data leaves your premises	yes	no

What exactly is stored is set out under Data handling and privacy.

Several clients on one account

A tenant can invoice on behalf of several clients — “in the name and for the account of”. Each invoice issuer has its own master data, its own logo and its own number range.

The number range belongs to the invoice issuer

An invoice issuer without its own numbering configuration counts along in the shared tenant range. Overlook that and two clients end up sharing one consecutive sequence. Details under Invoice issuers.

ERP surfaces are Enterprise capabilities

Three surfaces count as ERP integration: the ERP formats in conversion, the bulk import of raw-data exports, and invoice data capture through the API. They are offered as an Enterprise capability — in the public portal, however, they remain fully functional for everyone, including anonymously and on the Free plan. Only the volumes are limited.