Product documentation
Updated July 17, 2026

License Management: Status and Keys

Read your licence state — Active, Trial, Grace Period, Expired, Revoked, Offline — update the licence key, and understand what each state means for your team.

Overview

License Management shows your licence state and lets you update the License Key. Your licence determines which capabilities are available — Analytics needs Pro, Trial, or Enterprise; Single sign-on, Secret managers, and self-hosted AI models need Enterprise.

Nav path: Settings → Licensing & Users → License Management. Requires Administrator access.

Licence states

StateWhat it means
ActiveValid and current. Nothing to do.
TrialA time-limited evaluation.
Grace Period / Grace Period ActiveExpired, but still working — for now.
ExpiredPast its end date.
InactiveNot currently in force.
DeactivatedDeliberately deactivated.
RevokedWithdrawn by the issuer.
InvalidThe key isn't valid.
No LicenseNo licence present.
OfflineValidation couldn't reach the licensing service.
UnknownThe state couldn't be determined.

The two that need attention

Grace Period is the state that matters most, because everything still works and so nobody feels urgency. That's exactly the problem — grace exists to stop an expiry from breaking your CI at the worst moment, not to be a place to live. Renew during grace; the alternative is discovering the deadline via a red pipeline.

Offline does not mean your licence is bad. It means validation couldn't reach the service — a network path, a proxy, an egress rule. Check connectivity before assuming a licensing problem, especially on an on-prem install where outbound access is restricted. See Proxy settings.

The rest are mostly self-explanatory, but note the difference between Deactivated (someone chose this) and Revoked (the issuer chose this). Revoked is a conversation with your vendor; deactivated is usually a key moved to another instance.

Updating the key

Enter the new License Key and apply it. The state should move to Active — if it doesn't, read the state rather than re-pasting: Invalid is a wrong key, while Offline is a network problem and re-entering a perfectly good key won't fix it.

Deactivating

Deactivate License releases the licence from this instance. Do this deliberately — typically when moving a key to a different install. It's not a troubleshooting step, and deactivating to "reset" a licence you're having trouble with can leave you unable to work while you sort out reactivation.

When features disappear

If a capability vanished, check here first. Licence state changes are a common and easily-missed explanation:

  • Analytics gone from the navigation — the licence dropped below Pro/Trial/Enterprise.
  • SSO stopped and users can't sign in — an Enterprise licence lapsed. This one is urgent, because it can lock out everyone who authenticates through the identity provider.
  • Self-hosted AI model rejected — that's Enterprise-only. See AI settings.
  • Can't add a user — you may be at the licence's user entitlement, which is separate from Max Users Per Project in User policies.

What each tier unlocks

Licence tier is the explanation for a good share of "why can't I see this?" questions. The gating that comes up most:

CapabilityRequires
Analytics & DashboardsPro, Trial, or Enterprise
Single sign-on — SAML 2.0, OIDC, Azure AD/Entra IDEnterprise
Secret managers — HashiCorp Vault, AWS Secrets Manager, Azure Key VaultEnterprise
Self-hosted AI models — Ollama, LM Studio, vLLM (AI settings)Enterprise
Configurable audit retention (Audit logs)Enterprise

A gated feature is generally absent rather than broken — the navigation item isn't there, or the option is labelled as unavailable. If something is present and erroring, that's a fault, not gating.

Before a licence expires

Expiry is predictable, which makes being surprised by it avoidable:

  • Note the expiry date somewhere your team looks, not just in this page.
  • Know which Enterprise features you depend on. SSO lapsing is the one that hurts — if authentication runs through your identity provider and the licence drops, people can't sign in. That's an outage, not an inconvenience.
  • Renew during Grace Period, not after. Grace exists to absorb the gap; it isn't extra runway.
  • On an air-gapped or restricted install, check validation can reach out before renewal day. Offline on the day you need a new key is a bad time to discover an egress rule.

Troubleshooting

  • "Offline" — validation couldn't reach the licensing service. Check outbound connectivity and proxy configuration before suspecting the key.
  • "Invalid" — the key is wrong or malformed. Re-copy it from your licence document; stray whitespace is a classic.
  • "Grace Period Active" — you're past expiry and running on borrowed time. Renew now, not when it stops.
  • "Revoked" — the issuer withdrew it. Contact your vendor; nothing here will fix it.
  • "No License" — no key present. Enter one.
  • Everything works but a specific feature is missing — that's plan gating, not a fault. Check your tier against the feature's requirement.
  • The page is unavailable — you're not an Administrator.

Related articles

Next steps

Still stuck?

Tell us what you’re trying to accomplish and we’ll point you to the right setup—installation, auth, or CI/CD wiring.