Kalima Console: Overview
What the Kalima Console is, how owners and admins sign in, how sessions and step-up work, and which areas each role and plan can open.
The Kalima Console is a separate admin site at console.meetkalima.com where you manage a company account on the Team or Enterprise plan: members, teams, policies, sign-in rules, billing, the audit log and privacy settings. It never shows the content of recordings.
How to get there
From the app (owners and admins). In the Kalima app, open Settings, then Your organization. Next to Manage organization, choose Open. The console opens in a new tab.
Directly. Go to https://console.meetkalima.com. This is also the way in for people who hold a console role or a custom role but are not owners or admins.
Sign in. Choose Sign in with your Kalima account. If you are already signed in to the Kalima app in the same browser, you go straight in without a password.
If your account does not manage any company, the console shows You do not manage a company. If you manage several companies, use Switch company to change between them. Sign out of the console signs you out of the console only; you stay signed in to the app.
Security of console sessions
- Two-factor sign-in is required for everyone who uses the console. Without it, sign-in is refused. Set it up in the Kalima app under Profile, Account, then sign in again. See Account security.
- Session length: a console sign-in ends after 30 minutes without use and after 12 hours at the latest.
- Step-up for critical actions: before some steps the console asks for your second factor again if your last confirmation is older than 15 minutes. You confirm with a passkey (Confirm with passkey) or with a code from your authenticator app. Steps that ask include changing deletion rules, zero data retention, removing a verified domain, allowed networks, SCIM, SSO, audit streaming, webhooks, API keys, legal hold, Kalima support access, ownership transfer, the company export and deleting the company.
Passkeys work in the browser only. The desktop and phone apps cannot add or use them, so keep your authenticator app or recovery codes at hand if you use the console from there.
The 13 areas
The navigation shows only the areas your role opens. Owners and admins see all of them.
| # | Area | What you do there | Who else opens it |
|---|---|---|---|
| 1 | Overview | Key figures (seats, viewers, open invitations, suspended accounts, teams, plan) and a To do list | Everyone with console access |
| 2 | Members | Invite, suspend, sign out, offboard, console roles, custom roles, guests, seat requests, join requests. See Members | Member admin, Auditor (read only), custom roles with "Read the member list" |
| 3 | Teams | Teams, team leads, cost centers. See Teams | Member admin (read), custom roles with "Read teams" |
| 4 | Policies | Recording, deleting, AI, external sharing, export, integrations, sharing projects. See Policies | Auditor (read only), custom roles with "Read policies" |
| 5 | Sign-in & security | Two-factor rule, sign-in duration, console sign-ins, allowed networks, domains, SSO, SCIM. See Sign-in rules | Custom roles with "Read sign-in & security" (read only) |
| 6 | Vocabulary & templates | Company and team vocabulary, summary templates. See Vocabulary and templates | Custom roles with "Keep the vocabulary" or "Manage templates" |
| 7 | Content | Which recordings exist, by day and team only. See Usage and content | Owners and admins only |
| 8 | Usage | Seats and live recording time by team, never by person | Auditor, custom roles with "See usage" |
| 9 | Billing | Plan, seats, invoices, billing details. See Billing and seats | Billing role, custom roles with "Read billing" |
| 10 | Integrations & API | API keys, connected apps, webhooks. See Integrations and webhooks | Member admin and custom roles with "Manage members" see connected apps only |
| 11 | Audit log | Every change to the company, export, audit streaming. See Audit log | Auditor, custom roles with "Read the audit log" |
| 12 | Privacy | Contacts, DPA, subprocessors, encryption, works-council sheet, legal hold, export, deletion. See Privacy and works council | Auditor, custom roles with "Read privacy" |
| 13 | Settings | Company profile, ownership, Kalima support access. See Support access | Owners and admins only |
Some actions are reserved for the owner: transferring ownership, exporting and deleting the company, and placing or releasing a legal hold. Enforcing SSO and renewing the SSO certificate are also owner-only.
What each plan includes
The console is available to companies on the Team plan (including the Team trial) and on Enterprise. For prices, seats and how to book, see Billing and seats.
| On every console plan (Team and Enterprise) | Enterprise only |
|---|---|
| Members, invitations, CSV invite, invitation links, offboarding | Custom roles |
| Console roles (Member admin, Billing, Auditor) | Verified domains and join requests |
| Seat requests, guests, teams, cost centers | Single sign-on (SSO) |
| Policies, automatic deletion, separate audio deletion | User provisioning (SCIM) |
| Two-factor rule, sign-in duration, console sign-ins | Allowed networks (IP allowlist) |
| Vocabulary and summary templates | Audit streaming |
| Usage and content lists | Switching on zero data retention |
| Audit log (Team: last 90 days, Enterprise: last 365 days) | Placing a legal hold (releasing is always possible) |
| API keys, admin API, webhooks | |
| Privacy area, works-council sheet, company export, deleting the company | |
| Kalima support access |
Areas that need Enterprise show a short note with a Talk to us link instead of their settings.