Organizations reference
Overview
Organizations are the way to group users in your Code42 environment. You can configure different organizations to use different settings.
Organization, user, and device hierarchy
Backup activity in your Code42 environment is managed by settings at three levels: organizations, users, and devices.
- Organization
-
The hierarchical level in the Code42 environment for users and their devices. Each user can belong to only one organization. You can define many settings at the organization level; different organizations can have different settings. An organization can contain child organizations, and an organization can exist without containing any users.
- User
-
A single account in your Code42 environment. A user account has a single set of sign-in credentials (username and password) and a single encryption key for all backups. A user always belongs to one (and only one) organization.
- Device
Organizations
The Organizations screens display information about the organizations in your Code42 environment. From Organizations, you can
- Add organizations
- Click an organization name to view more details about that organization.
- Perform actions on the selected organization.
To access the Organizations screens, select Administration > Environment > Organizations from the menu.
Incydr Professional and Enterprise
| Item | Description | |
|---|---|---|
| a | Create Organization | Click to add a new organization. |
| b | Filter  |
Filters the list of organizations by status. You can view either active or deactivated organizations. By default, the table shows only active organizations. |
| c | Filtered by | The filter used to display information in the table. If you are viewing deactivated organizations, click the X to remove that filter and display active organizations. |
| d | Name | The organization's name. |
| e | Expand / Collapse  |
Click to expand a parent organization to view its child organizations. Click again to collapse the list. |
| f | Status | The organization's status: Active or Deactivated. Deactivated organizations are hidden by default. Click Filter to view the organizations listed in the table by status. |
| g | Users | The number of active users in the organization. |
| h | Devices | The number of active devices in the organization. |
| i | View organization details  |
Click to open the organization's details to view more information, such as the authentication or proxy methods the organization uses and which exfiltration vectors are being monitored for devices in that organization. |
Create an organization
You can add a new organization from either the Organizations table or from an organization's detail screen.
- Select how to add the new organization:
- On the Organizations table, click Create Organization.
- On an organization's detail screen, select Actions > Add child organization.
- Enter a name for the new organization.
Names must contain at least 3 characters, to a maximum of 220 characters. - If you're creating a new organization from the Organizations screen, select the new organization's parent organization.
By default, new organizations are created as children of your top-level organization, but you can select a different parent organization if needed. When you add an organization using the Actions menu on an organization's detail screen, the new organization is automatically created as a child of that existing organization. - Click Create.
Filter the Organizations table
By default, the Organizations table automatically lists only active organizations. To change the view:
- Click Filter .
- Select the Status of the organizations that you want to view: Active or Deactivated.
- Click Apply.
The table changes to show the organizations with the status you selected.
View organization details
Click any row in the Organizations table to view more information about that organization.
| Item | Description | |
|---|---|---|
| a |
Organization name |
The name of the organization.
If the organization is a child of another organization, the parent organization's name is listed. Click the link to open the details for that parent organization. |
| b | Status identifier | The organization's status: Active or Deactivated |
| c | Users | The number of active users in the organization. Click the total to view a list of this organization's users. |
| d | Devices | The number of active devices in the organization. Click the total to view a list of this organization's devices. |
| e | Child organizations | The number of child organizations assigned to this parent organization. Click the total to view this organization's child organizations. Deactivated child organizations are not included in this total. |
| f | Registration key | The registration key for this organization. |
| g | Date created | The date the organization was created. |
| h | Actions |
Select the action you want to take on the organization from the menu:
|
| i | Authentication |
Identifies the authentication provider and local two-factor authentication settings (if any) that control how users are authenticated.
Authentication provider This section identifies the method the organization uses to authenticate users as well as the identity management provider your organization uses.
For more information, see Configure an organization's authentication provider settings.
Local two-factor authentication Defines two-factor authentication requirements for local administrative users that log into the Code42 console.
Affected users:
For more information, see Two-factor authentication for local users |
| j | Endpoint Data Collection |
Identifies the endpoint vectors and destinations that are monitored for possible file exfiltration activity. You can also specify whether to collect metadata or the entire contents of files that are exfiltrated (or both) when such activity is detected.
For more information, see Organizations - Endpoint Data Collection reference. |
| k | Proxy |
Identifies the proxy settings used by the organization.
For more information, see Organizations - Proxy reference. |
Incydr Basic and Advanced, CrashPlan Cloud, and other plans
Video
See the video below to learn more about organizations. For more videos, visit the Code42 University.
Organizations screen
| Item | Description | Click to view | |
|---|---|---|---|
| a | Active | Displays all active organizations. | |
| b | Deactivated | Displays all deactivated organizations. | |
| c | Action menu | Contains commands available in the organization list view. | |
| d | Add an organization | Creates a new organization. | |
| e | – | Selects all the organizations in the list. | |
| f | Name | Displays the organization name. | Organization Detail for selected organization |
| g | Users | Displays the number of active users assigned to the organization. | User List for selected organization |
| h | Backup Devices | Displays the number of user devices backing up in this organization. | All devices assigned to the selected organization. |
Add a new organization
Click Add an organization 
to create a new organization.
Action menu
| Command | Description |
|---|---|
| Block |
Blocks this organization and all its users and devices.
|
| Unblock | Unblocks this organization and any blocked users or devices within this organization. This action is available when the organization is currently blocked. |
| Change Organization | Moves the organization to a different parent organization. |
| Export | Exports selected items to CSV file. If no item is selected, all items in the list are exported. |
CSV export
Export all visible list items to a CSV file by selecting Export All from the action menu. If no organization is selected, all organizations in the list are exported.
| Field | Description |
| orgId | Identification number for the organization. |
| parentOrgId | Identification number for the parent organization. |
|
orgName |
Name of the organization. |
| registrationKey | Registration Key for this organization. |
| status | Organization is active or blocked. |
| active | TRUE: Active FALSE: Blocked |
| blocked | TRUE: Blocked FALSE: Not blocked |
| computerCount | Number of devices registered to users in this organization. |
| backupDeviceCount | Number of devices using the Code42 app. |
|
shareDeviceCount |
Deprecated. |
| planCount | Number of plans under this organization. |
|
warningCount |
Number of warning alerts for this organization. A warning alert happens when a device has not backed up to any destination for longer than the number of days defined in the Organization's Settings |
|
criticalCount |
Number of critical alerts for this organization. A critical alert happens when a device has not backed up to any destination for longer than the number of days defined in the Organization's Settings. |
|
targetComputerGuid |
Globally Unique IDentifier for the device used for computer-to-computer back up. |
| targetDestinationGuid | The globally unique identifier of the destination. |
|
selectedFiles |
Total number of files selected for backup. |
|
selectedBytes |
|
|
todoBytes |
|
|
todoFiles |
|
|
archiveBytes |
|
| orgGuid | Globally unique identifier of the organization. |
| parentOrgGuid | Globally unique identifier of the parent organization. |
| orgUid | The UID (unique ID) of the organization. |
| parentOrgUid | The UID (unique ID) of the parent organization. |
| orgExtRef | |
| notes |
Details
Organization Details displays stats and settings for the selected organization.
| Item | Description | |
|---|---|---|
| a | Action menu | Contains the actions that you can apply to this organization. |
| b | Orgs |
Displays the number or child organizations under this organization. Click to view the organizations in detail. |
| c | Users | Displays the number of users in this organization. Click to view the users in detail. |
| d | Devices | Displays the number of devices in this organization. Click to view the devices in detail. |
| e | Restores | Displays the number of restores that have occurred in this organization. Click to view the restore history in detail. |
| f | Cold | Displays the cold storage used by this organization. Click to view the cold storage use in detail. |
| g | Registration Key | Displays the Registration Key for this organization. Use this key to assign new users and devices to this organization. |
| h | Date Created | Displays the date this organization was created. |
| i | Storage | Displays statistics of data stored for this organization. |
| j | Storage Utilization | Displays a summary of storage by user. Chart regions are clickable. |
| k | Org Info |
Displays current organization settings.
See the Edit section below to change these settings for a specific organization. |
| l | Device Backup Defaults | Displays current device backup settings. To change these settings, see Configuring Device Backup Settings. |
Action menu
| Command | Description |
|---|---|
| Edit | Edits organization settings including name, quotas, destinations, reporting and security. |
| Device Backup Defaults | Edits default device backup settings for this organization. |
| Upgrade Clients | Updates the Code42 app on all devices in this organization to the most recent available version. This does not affect child organizations. |
| Add a Child Organization | Adds a new organization that is subordinate to the selected organization. |
| Add Users | Adds users to this organization. |
| Invite Users | Sends an invitation via email to back up. |
|
Activate |
Activates a deactivated organization.
|
|
Deactivate |
Deactivates this organization and all associated users and devices, and places all backup archives into cold storage. Incydr monitoring stops.
|
|
Block |
Blocks this organization and all its users and devices.
|
|
Unblock |
Unblocks this organization and any blocked users or devices within this organization. This action is available when the organization is currently blocked. |
| Change Organization | Changes this organization's parent organization. Settings remained unchanged when the organization's parent is changed. |
| Email Backup Report | Emails a backup report for a specified period to organization managers or other email addresses of your choice. |
Edit
From the Organization Details action menu, select Edit to access settings for quotas, reporting, security, reference, and endpoint monitoring. Each section is explained in detail below.
Quotas
| Item | Description | |
|---|---|---|
| a | Name | Sets the name of this organization. |
| b |
Compliance Settings |
Activates Compliance Settings for this organization. |
| c | Inherit quota settings from parent |
Configures the organization to take on the quota settings of the organization defaults (system-wide organizations) or its parent organization. When enabled, settings must be edited at the organization default or parent organization level. |
| d | Maximum user subscriptions |
Sets the maximum number of user subscriptions allowed for this organization.
|
| e | Move deactivated archives to cold storage for | Allows you to set and view the cold storage period. After this period expires, the archives are deleted from the file system. |
| f | Backup disk quota | Sets the total amount of storage the entire organization is allowed to consume. |
| g | Backup user disk quota |
Sets the total amount of storage each user is allowed to consume across all devices. Only applies to newly added users. To apply changes to existing users, update quotas via the Code42 API. |
| h | Web restore limit1, 3 |
Amount of data that users are allowed to restore in a zip file restore session.
|
| i | Web restore limit for Org Manager Role1, 3 |
Amount of data that administrators are allowed to restore in a zip file restore session.
|
1 This setting is disabled when Compliance Settings are activated.
2 Note: The default restore limit for zip files is 250 MB. Even though this limit can be adjusted, zip files have their own inherent size limitations. Our Customer Champions typically see that file selections larger than 1 GB fail. Web restores are useful for quick, small downloads in emergency situations, or when other restore methods are not available. Large restores should be done through the Code42 app or using the device restore feature.
3 Zip file restores are not available in the Code42 federal environment. Instead, use the device restore feature to restore files to a device.
Reporting
| Item | Description | |
|---|---|---|
| a | Name | Sets the name of this organization. |
| b | Compliance Settings | Activates Compliance Settings for this organization. |
| c | Inherited reporting settings from parent |
Configures the organization to take on the reporting settings of the organization defaults (system-wide organizations) or its parent organization. When enabled, settings must be edited at the organization default or parent organization level. |
| d | Send backup report |
Enables or disables sending backup reports to org admins for this organization. Choose which days of the week you'd like to receive reports. |
| e | Recipients |
Displays currently configured report recipients. For new customers, the first administrator is a recipient by default. To start or stop emails to other users, add or delete addresses from the next field, Additional recipients. |
| f | Additional recipients | Allows you to add or delete report recipients. |
| g | Warning |
Configures the alert threshold for warning notifications. Devices that have not backed up to any destination for longer than the defined number of days are included on warning alert emails. |
| h | Critical |
Configures the alert threshold for critical notifications. Devices that have not backed up to any destination for longer than the defined number of days are included on critical alert emails.
For directions on how to customize the critical backup alert email sent to users, see Customize email templates. |
Security
| Item | Description | |
|---|---|---|
| a | Name | Sets the name of this organization. |
| b | Compliance Settings |
Activates Compliance Settings for this organization. |
| c | Inherit security settings from parent |
Configures the organization to take on the security settings of the organization defaults (system-wide organizations) or its parent organization. When enabled, settings must be edited at the organization default or parent organization level. |
| d | Select an authentication method |
Sets the authentication method for the organization:
|
| e |
Choose provider(s) |
Specifies the SSO identity provider(s) that provide authentication. Options appear based on your identity provider configuration.
SSO requires configuration of at least one identity provider via Administration > Integrations > Identity Management. |
| f | Select a directory service |
Deprecated To use a directory service with your Code42 cloud environment, see:
|
| g | Choose directory service(s) |
Deprecated To use a directory service with your Code42 cloud environment, see:
|
| h | Local Two-Factor Authentication |
Defines two-factor authentication requirements for accessing the Code42 console.
Affected users:
See Two-factor authentication for local users for more details. |
| i | Web restores |
Sets whether users can restore files from the Code42 console using the zip file web restore method:
The setting only applies to the zip file web restore type; it does not apply to the device web restore type. It may take up to a day before all users in the organization are updated with the new setting.
To change the setting, administrators must have the Customer Cloud Admin role. Clicking the Lock button prevents administrators in child organizations from changing the setting. Increased security
Disable zip file web restores to limit file exfiltration potential by preventing users from downloading data in a browser and the decryption of archive data by the Code42 server system. This secures user data from access by administrators. Zip file web restores must be disabled for NIST 800-171 compliance. |
| j | Client Visibility |
Configures Code42 app visibility on user devices.
|
| k | Inherit setting from parent |
|
| l | Lock |
Click the icon to lock or unlock each setting.
When locked:
When unlocked:
|
Reference
| Item | Description | |
|---|---|---|
| a | Name | Sets the name of this organization. |
| b | Compliance Settings | Activates Compliance Settings for this organization. |
| c | External Reference | Specifies optional external reference information such as a serial number, asset tag, employee ID, or help desk issue ID. |
| d | Notes | Specifies optional descriptive information. |
Endpoint Monitoring
- Endpoint monitoring requires a product plan that includes file exfiltration detection.
- Endpoint monitoring cannot be enabled if Compliance Settings are activated.
| Item | Description | |
|---|---|---|
| a | Name | Sets the name of this organization. |
| b | Compliance Settings | Activates Compliance Settings for this organization. |
| c | Inherit settings from parent | Configures the organization to take on the security settings of the organization defaults (system-wide organizations) or its parent organization. When enabled, settings must be edited at the organization default or parent organization level. |
| d | Enable endpoint monitoring | Enables monitoring of file activity on user devices. When enabled, Removable Media, Cloud Sync Applications, and Browser and other Application Activity are enabled by default. |
| e | Removable Media |
Enables or disables scanning of file metadata on all removable media, such as USB drives or SD cards. |
| f | Cloud Sync Applications |
Enables or disables detection of syncing files using these cloud storage apps:
|
| g | Browser and other Application Activity |
Enables or disables detection of files accessed by web browsers and other applications (for example, uploading attachments to web-based email or downloading files via FTP). This may also include other instances of apps accessing a file, such as opening a local file to view it in a web browser without actually uploading it. |
| h | Printers (Mac and Linux only) | |
| i | File Metadata Collection |
Enables or disables File Metadata Collection for Code42's detection, investigation, and alerting features, including Forensic Search. Forensic Search provides detailed visibility for Code42 administrators about:
This enables administrators to search file metadata to gain a clearer understanding of file activity throughout the organization. Requires a product plan that includes File Metadata Collection. |
Device backup defaults
To change device backup defaults, from the action menu, choose Device Backup Defaults.
Select from the tabs to configure specific settings:
- General: Specify client settings related to CPU power and bandwidth allocation, device backup alert thresholds, and file exclusions.
- Backup: Define how and when backup operations take place, what files to include and exclude from backup, the frequency of backup, and how long to retain file versions.
- Reporting: Specify when and what reports are sent and to whom.
- Security: Set the default encryption key policy. After the encryption policy is elevated, upgraded Code42 environments can never downgrade their policy.
- Network: Control connection performance settings for WAN and LAN networks, exclude wireless networks, exclude network interfaces, or configure proxy settings.
Enable Use device defaults from parent to make this organization use the device backup default settings from the parent (or root) organization. Disable to stop inheritance and allow changes to the device default settings for this organization. All organizations have the same settings options as the root organization, which appear in Set device defaults.
Add a child organization
Use the Add a Child Organization command to create a new organization under the currently selected organization.
Add users
| Item | Description |
|---|---|
| a | Adds users one-by-one. In order to begin backing up, the Code42 app must be installed on each user's device. |
| b | Adds users in bulk by uploading a text file. |
| c | Downloads a sample text file with information on how to format the text file. |
| d | Uploads the text file containing the users you'd like to add. In order to begin backing up, the Code42 app must be installed on each user's device. |
Invite users
You must have the Org Admin or Cross Org Admin role or similar administrative permissions to use Invite Users.
| Item | Description |
|---|---|
| a | Specifies email addresses of users you want to invite. |
| b | Specifies the email address users reply to. |
| c | Defines the subject line and body text of message that accompanies user instructions for downloading and installing. |
Change organization
If users are moved to a different organization, it could affect their backup. For example:
- Different destinations offered: If the new organization does not offer the same destinations as the user's previous organization, any of the user's data from destinations that are no longer offered are put in to cold storage. Data in cold storage is deleted according to your cold storage retention policy.
- Frequency and version settings: Any differences in the new organization's frequency and version settings are applied to the backup archive after the user device connects to the Code42 cloud. Depending on the new organization's frequency and version settings, some data could be removed.
- Auto-start backups: If the new organization has any destinations configured to auto-start, the Code42 app begins backing up to those destinations immediately. Destinations that are not configured to auto-start appear in the Code42 app for the user to select.
| Item | Description |
|---|---|
| a | Searches for parent org name. |
| b | Displays the results of the search as you type. |
Email backup report
| Item | Description |
|---|---|
| a | Defines the start of the reporting period. |
| b | Defines the end of the reporting period. |
| c | Indicates whether or not you want child organizations included in the report. |
| d | Specifies the email addresses of report recipients. Click + to add email addresses to the list. Click X to remove an email address. |
| e | Adds any users in the selected organization assigned the Org Manager or Cross Org Manager role to the email distribution list. |
Cold Storage
From the organization details, click the Cold value to view a list of the organization's archives currently in cold storage.
| Item | Description | |
|---|---|---|
| a | Action menu | Contains available commands for the archives in cold storage. |
| b | Select all | Selects all the organization's archives in cold storage. |
| c | Type |
Indicates the archive type.
|
| d | Archive GUID | Globally unique identifier of the archive. |
| e | Organization | Organization where the archive resides. |
| f | User | User that owns the archive. |
| g | Device Name |
Name of the device that owns the backup archive.
|
| h | Hostname |
The host name of the device where the backup archive resides in the Code42 cloud, as reported by the computer's operating system. Security archives display Not Available because more than one device can be associated with a security archive. |
| i | Store Point | Store point on a server in the Code42 cloud where the archive resides. |
| j | Size | Amount of space consumed by the archive. |
| k | Purge Date | Date when the archive is removed from cold storage. |
Action menu
| Command | Description |
|---|---|
| Purge Archive | Permanently removes the selected archives from the store point's file system on a server in the Code42 cloud. |
| Change Purge Date | Changes the date when the selected archives will be completely removed from the store point's file system on a server in the Code42 cloud. |
| Export All | Exports a list of archives to a CSV file. |
Change purge date
Change the purge date by selecting action menu > Change Purge Date.
CSV export
Export all visible list items to a CSV file by selecting action menu > Export All. If no archive is selected, all archives in the list are exported. The following attributes are exported to the CSV file.
| Field | Description |
| archiveGuid | Globally unique identifier for the archive. |
| id | Identification number of the archive. |
| archiveBytes | Total size of files selected for back up and sync. |
| archiveType |
Indicates the archive type.
|
| sourceUserId | The ID of the user associated with this archive. |
|
sourceUserUsername |
User name for the user associated with this archive. |
| sourceUserFirstName | First name of the user associated with the archive. |
| sourceUserLastName | Last name of the user associated with the archive. |
| sourceUserEmail | Email for the user associated with the archive. |
| sourceComputerId | An identification number for the device associated with the archive. |
| sourceComputerName | Name of the device associated with the archive. |
|
sourceComputerOsHostname |
The name of the computer where the archive resides in the Code42 cloud as reported by the computer's operating system. |
| sourceComputerService | Indicates the app associated with the archive. |
| purgeDate | Date when the archive is removed from cold storage. |
| orgId | Identification number of the organization where the archive resides. |
| orgName | Name of the organization where the archive resides. |
| storePointId | Identification number of the store point on a server in the Code42 cloud where the archive resides. |
| storePointName | Name of the store point on a server in the Code42 cloud where the archive resides. |
| serverName | Name of the server in the Code42 cloud associated with the store point. |
Restore history
View the Restore History by selecting an organization, then clicking the number of restores. These details are restricted by role: you can view only the restore history to which you have access based on your role permissions.
| Item | Description | |
|---|---|---|
| a | Action menu | Includes the option to Export (as CSV) the restore information. |
| b | Operating System | Displays the operating system of the device that received the restored data. |
| c | User | User whose data was restored. A red warning icon  will appear if another user initiated the restore (via restoring from the Code42 console, for example). |
| d | Restore To | Device that received the restored data. |
| e | # Files | Number of files that were restored. |
| f | Size | Total size of the restored files. |
| g | Transfer Rate | Speed of the file restoration. |
| h | Restore Date | Date and time the restoration occurred. |
| i | Duration | Total time taken to restore the files. |