Team, settings and your account

Adding colleagues, changing roles, removing access, the PO approval limit, data access for the AI assistant, two-step login, and changing your password.

Open Team & settings in the Portal menu.

Team (owners and admins)

Adding a colleague: click Add colleague and enter the name, email, role and a temporary password (at least 10 characters). Give that password to your colleague privately and ask them to change it straight away in Team & settings → Change my password. If the email already has an Air-M account at another company, they simply sign in with their existing password.

Changing a role: choose the new role in the team list. There are nine roles: Owner, Admin, Finance, HR, Purchasing, Sales, Warehouse, Engineering and Viewer. See what each role means in Getting started and who approves what in Approvals. The change applies from that person's next request.

Reset password: for a colleague who forgot their password. See My account below.

Removing access: click Remove. That person immediately loses access to the company's data ("You no longer have access to this company"). Everything they recorded stays, together with its audit trail.

Safety rules:

Only an owner can add, change or remove another owner.
A company always has at least one owner.
You cannot remove your own access.

Company settings (owners and admins)

Company name and Company NPWP (used on tax invoices).
Approval needed for POs above (Rp, incl. PPN): purchase orders above this value need approval. The default is Rp 5,000,000.
Assistant may look up company records (in the Ask Air-M assistant panel): when on, the assistant can check your data (for example an invoice's status) to answer questions, limited to what the person asking is allowed to see. When off, the assistant only answers from this manual. See AI assistant and privacy.

Data and backups (owners and admins)

Your data and backups has the Download all data button and the setting for daily backups to a Google Cloud bucket owned by your company. See Your data, exports and daily backups.

Two-step login protects your account even if your password leaks: every sign-in needs your password and a 6-digit code from your phone. Owners, admins and Finance users should always turn it on.

Install a free authenticator app on your phone: Google Authenticator (by Google LLC), Microsoft Authenticator (by Microsoft Corporation) or the built-in Passwords app on iPhone. Avoid look-alike apps that ask for a paid subscription.
In Team & settings → Two-step login, click Turn on.
Open the authenticator app, tap +, then Scan a QR code. Do not scan with the normal phone camera or another QR scanner app: the code is not a website address, and other scanners may open adverts or strange sites.
Can't scan? In the app choose Enter a setup key and type the key shown on screen (not into Air-M's code box).
Type the 6-digit code the app shows into the code box, then save.

If the code is rejected, make sure the phone's clock is set automatically and use the newest code (it changes every 30 seconds).

Lost or changed your phone? An owner or admin clicks Reset two-step on your name in the team list, and you can set it up again after signing in. Never share the QR code, the setup key or a 6-digit code with anyone, including the Air-M team.

In the Required two-step login panel, click Change and tick the roles that must use two-step login, for example Owner, Admin and Finance. Then save.

People in those roles who have not set it up can still sign in with their password, but they go straight to a Two-step login required screen and cannot open anything until they set it up. Anyone already using the app is asked to set it up at their next action.
In the team list, people who have not set it up yet are marked Two-step required, not set up yet, and the panel shows how many still need to do it.
If your own role is ticked, turn on two-step login for your own account first. Air-M will not save the setting before that, so you cannot lock yourself out.
While it is required, people cannot turn two-step login off themselves. If a phone is lost, an owner or admin can still use Reset two-step; the person then sets it up again at their next sign-in.

My account

Changing your password: enter your current password and a new one (at least 10 characters), then save. All older sessions on other devices are signed out automatically.

Locked out: after 5 wrong passwords the account is locked for 15 minutes. An owner or admin can unlock it sooner with Reset password.

Forgot your password: ask your company's owner or admin to open Team & settings and click Reset password on your name. They set a temporary password; sign in with it and change it straight away. If your account is also used for another company on Air-M, for security the reset has to go through the Air-M team. Resetting your own password by email is being prepared.