Manage your organization
from one place
Add employees, create mailboxes, assign roles and enforce two-factor authentication in minutes. Every admin action is logged.
Included in every organization account, for owners and admins
Admin console
All admin work
in one place
Owners and admins open the admin console with their own MORA account. Regular users see only their own account page.
Users
Add, suspend, restore and delete users, and reset passwords. Find anyone by name or email.
Domains
A free yourcompany.apps.vn address plus your own domains, with the verification status of each.
Mailboxes
Turn on email for a domain with one click. Create mailboxes for employees and shared ones like support@ and billing@.
MORA Cloud
Every user gets MORA Cloud. View each person’s Cloud account and create shared storage for departments in MORA Cloud.
Security
See who has two-factor authentication on, enforce it for one person or everyone, and sign people out of all devices.
Admin log
Every admin action is recorded: who, what and when.
Roles
Who can do what
in your organization
The person who creates the organization is the primary owner and can make others owners too. Admins handle daily work in the areas they are given, such as users, domains and mailboxes. Owners manage the other admins.
| Feature | OwnerFull control | AdminDaily management | UserUses the services |
|---|---|---|---|
| Use the organization’s MORA Mail, Meet, Cloud and Chat | Included | Included | Included |
| Change own password, turn on two-factor authentication | Included | Included | Included |
| Add, suspend, delete users and reset passwords | Everyone except the primary owner | People with the User role (Users area) | Not included |
| Grant owner and admin roles; choose the areas each admin manages | Included | Not included | Not included |
| Add custom domains, edit records | Included | When assigned Domains and DNS | Not included |
| Turn on email, create mailboxes and shared mailboxes | Included | When assigned Mailboxes | Not included |
| Create shared storage in MORA Cloud | Included | When assigned MORA Cloud | Not included |
| Enforce two-factor authentication, sign users out of all devices | Included | When assigned Users | Not included |
| View the admin log | Included | Included | Not included |
No one can suspend, delete or change the role of their own account. The primary owner cannot be demoted, suspended or deleted. Deleted users keep their account and mailbox for 20 days so they can be restored.
Users
From first day to last day
Add a user in one step: MORA creates the account, the mailbox and a temporary password. When someone leaves, suspend or delete the account and keep the data.
- The temporary password shows only once, with a copy button and a printable handout
- Users must set a new password at first sign-in
- Suspend: blocks sign-in, the mailbox still receives email, data stays as it is
- Delete: keeps the account, mailbox and files for 20 days, restorable during that time
Security
Enforce two-factor authentication with one click
The Security page shows who has it on and who doesn’t. Enforce it for one person or for everyone; users set it up at their next sign-in.
- Two-factor authentication with an authenticator app on the phone
- Sign one person out of all devices if a password may be exposed
- Reset a password: creates a new temporary password and ends all open sessions
Admin log
Know who did what, and when
The log records every action by owners and admins: adding users, changing roles, resetting passwords, turning on email and adding domains.
- Each entry shows the time, the person and the action
- Automatic actions are clearly marked as done by the system
- The admin home page shows recent activity
Domains
Your own domain, verified in a few steps
Every organization gets a free yourcompany.apps.vn address right away. To use your existing company domain, add one record to prove you own it.
- Point your name servers to MORA and mail records are added for you
- Keep your current DNS host: MORA shows the records to add, with copy buttons
- A domain works only after verification, so no one can claim yours
- Buy a new domain through MORA: coming soon
Account security
Protection
for every account
Most of these apply to every MORA account, personal or organization. Admin tools are for organization accounts.
Two-factor authentication
Uses an authenticator app on the phone. Users turn it on themselves, or an admin enforces it.
Password recovery
Recover access with a code sent by email to the sign-in address.
Password guessing protection
After repeated wrong passwords, sign-in is locked for a while, with longer waits each time.
Password rules
At least 8 characters, not containing the username or email.
Session overview
Everyone can view their own sign-in sessions under Account and security.
Sign out of all devices
Admins end all of a person’s open sessions with one click. An open MORA Mail tab signs out within about a minute.
Encrypted connections
Websites, email and mail apps connect to MORA over encrypted connections.
Email and documents
Protect your organization’s
email and documents
These protections turn on automatically when you use MORA Mail, MORA Cloud and MORA Meet.
Sender spoofing protection
The server rejects email whose sender address does not match the signed-in mailbox.
Domain authentication
When you turn on email, MORA prepares the mail authentication records (added automatically if the domain uses MORA name servers), so recipients trust your email more.
Safe reading
External images are blocked by default, and messages display in a safe frame.
Spam and abuse filtering
Automatic spam filtering and sending limits for each mailbox. Each organization has its own sending reputation.
Password-protected links
MORA Cloud links shared outside always need a password and can have an expiry date.
Data separated by organization
MORA Cloud shares only within your organization. Outside guests in MORA Meet wait for approval.
FAQ
Questions about
admin and security
Need more help? Send us a message from the contact page, or email hotro@mora.vn.
Who can open the admin console?
Active owners and admins of the organization. Admins manage only people with the User role; owners manage other admins. Regular users see only their own account page: organization, role, links to services and a list of admins to contact.
What is the difference between suspending and deleting a user?
Suspending blocks sign-in but keeps everything: the mailbox still receives email and you can restore the user at any time. Deleting also blocks sign-in and keeps the account, mailbox and files for 20 days so you can restore them; after that, the account and mailbox are removed for good. Either way, an open MORA Mail tab signs out within about a minute, and within about two minutes the mailbox is locked in every mail app. Incoming email still arrives.
What should I do if an employee’s password may be exposed?
Open that person’s profile in the admin console and choose Reset password: MORA creates a new temporary password and ends all open sessions. You can also sign them out of all devices, or enforce two-factor authentication for that person.
Can I see who did what?
Yes. The admin log records actions by owners and admins: adding, suspending and deleting users, resetting passwords, changing roles, turning on email, creating mailboxes and adding domains, with the time and the person.
Can I import employees in bulk?
Bulk import is coming soon. For now, admins add each person in one step, and MORA creates the account, mailbox and temporary password. Moving the whole company to MORA? Contact us for help.
Can an owner hand over control?
An owner can make other people in the organization owners, so a company can have several owners. The primary owner, who created the organization, cannot be demoted or deleted by anyone. Transferring the primary owner role is coming soon. Contact us if you need help.
Is MORA Mail safe in Outlook or on a phone?
Mail apps use separate app passwords, created in MORA Mail settings. Each mailbox can have up to 5, and you can revoke them at any time. If a phone is lost, revoke that phone’s password; no need to change the account password.
Is our data separated from other organizations?
Yes. In MORA Cloud, users can find and share only with people in the same organization. In MORA Meet, outside guests wait in the waiting room and cannot see your recordings or attendee lists. Each organization sends email with its own reputation, so another organization marked as spam does not affect yours.
Clear admin
from day one
Tell us about your organization. You get a free yourcompany.apps.vn address, an admin mailbox and the admin console.