License Management: Status and Keys
Read your licence state — Active, Trial, Grace Period, Expired, Revoked, Offline — update the licence key, and understand what each state means for your team.
Overview
License Management shows your licence state and lets you update the License Key. Your licence determines which capabilities are available — Analytics needs Pro, Trial, or Enterprise; Single sign-on, Secret managers, and self-hosted AI models need Enterprise.
Nav path: Settings → Licensing & Users → License Management. Requires Administrator access.
Licence states
| State | What it means |
|---|---|
| Active | Valid and current. Nothing to do. |
| Trial | A time-limited evaluation. |
| Grace Period / Grace Period Active | Expired, but still working — for now. |
| Expired | Past its end date. |
| Inactive | Not currently in force. |
| Deactivated | Deliberately deactivated. |
| Revoked | Withdrawn by the issuer. |
| Invalid | The key isn't valid. |
| No License | No licence present. |
| Offline | Validation couldn't reach the licensing service. |
| Unknown | The state couldn't be determined. |
The two that need attention
Grace Period is the state that matters most, because everything still works and so nobody feels urgency. That's exactly the problem — grace exists to stop an expiry from breaking your CI at the worst moment, not to be a place to live. Renew during grace; the alternative is discovering the deadline via a red pipeline.
Offline does not mean your licence is bad. It means validation couldn't reach the service — a network path, a proxy, an egress rule. Check connectivity before assuming a licensing problem, especially on an on-prem install where outbound access is restricted. See Proxy settings.
The rest are mostly self-explanatory, but note the difference between Deactivated (someone chose this) and Revoked (the issuer chose this). Revoked is a conversation with your vendor; deactivated is usually a key moved to another instance.
Updating the key
Enter the new License Key and apply it. The state should move to Active — if it doesn't, read the state rather than re-pasting: Invalid is a wrong key, while Offline is a network problem and re-entering a perfectly good key won't fix it.
Deactivating
Deactivate License releases the licence from this instance. Do this deliberately — typically when moving a key to a different install. It's not a troubleshooting step, and deactivating to "reset" a licence you're having trouble with can leave you unable to work while you sort out reactivation.
When features disappear
If a capability vanished, check here first. Licence state changes are a common and easily-missed explanation:
- Analytics gone from the navigation — the licence dropped below Pro/Trial/Enterprise.
- SSO stopped and users can't sign in — an Enterprise licence lapsed. This one is urgent, because it can lock out everyone who authenticates through the identity provider.
- Self-hosted AI model rejected — that's Enterprise-only. See AI settings.
- Can't add a user — you may be at the licence's user entitlement, which is separate from Max Users Per Project in User policies.
What each tier unlocks
Licence tier is the explanation for a good share of "why can't I see this?" questions. The gating that comes up most:
| Capability | Requires |
|---|---|
| Analytics & Dashboards | Pro, Trial, or Enterprise |
| Single sign-on — SAML 2.0, OIDC, Azure AD/Entra ID | Enterprise |
| Secret managers — HashiCorp Vault, AWS Secrets Manager, Azure Key Vault | Enterprise |
| Self-hosted AI models — Ollama, LM Studio, vLLM (AI settings) | Enterprise |
| Configurable audit retention (Audit logs) | Enterprise |
A gated feature is generally absent rather than broken — the navigation item isn't there, or the option is labelled as unavailable. If something is present and erroring, that's a fault, not gating.
Before a licence expires
Expiry is predictable, which makes being surprised by it avoidable:
- Note the expiry date somewhere your team looks, not just in this page.
- Know which Enterprise features you depend on. SSO lapsing is the one that hurts — if authentication runs through your identity provider and the licence drops, people can't sign in. That's an outage, not an inconvenience.
- Renew during Grace Period, not after. Grace exists to absorb the gap; it isn't extra runway.
- On an air-gapped or restricted install, check validation can reach out before renewal day. Offline on the day you need a new key is a bad time to discover an egress rule.
Troubleshooting
- "Offline" — validation couldn't reach the licensing service. Check outbound connectivity and proxy configuration before suspecting the key.
- "Invalid" — the key is wrong or malformed. Re-copy it from your licence document; stray whitespace is a classic.
- "Grace Period Active" — you're past expiry and running on borrowed time. Renew now, not when it stops.
- "Revoked" — the issuer withdrew it. Contact your vendor; nothing here will fix it.
- "No License" — no key present. Enter one.
- Everything works but a specific feature is missing — that's plan gating, not a fault. Check your tier against the feature's requirement.
- The page is unavailable — you're not an Administrator.
Related articles
Related articles
- Administration Settings · Product documentation
- Server Connection · Product documentation
- Proxy Settings · Product documentation
- User Management · Product documentation
- Role Permissions · Product documentation
- User Policies: Registration and Passwords · Product documentation
Next steps
- Getting started · Install + connect your spec
- Configuration fundamentals · Stabilize runs
- Initial configuration · Users, licensing, projects
- Release notes · Updates and fixes
Still stuck?
Tell us what you’re trying to accomplish and we’ll point you to the right setup—installation, auth, or CI/CD wiring.