Licensing
OrbisID is available in three editions: Community (free), Pro, and Enterprise. Without an active licence key, OrbisID runs in Community edition.
Edition Limits
| Limit | Community | Pro | Enterprise |
|---|---|---|---|
| Maximum systems | 10 | 25 | Unlimited |
| Maximum users | 1 | 10 | Unlimited |
| Scheduled scan policies | 0 | 1 | Unlimited |
Feature Comparison
Systems & Credentials
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| View systems | Yes | Yes | Yes |
| Manage systems | Yes | Yes | Yes |
| Basic system types (AD, Linux, Windows) | Yes | Yes | Yes |
| Extended system types (databases, cloud platforms, PAM tools, identity providers, and all others) | - | Yes | Yes |
| Custom Script connectors | - | - | Yes |
| Auto-import systems from AD | - | - | Yes |
| View credentials | Yes | Yes | Yes |
| Manage credentials | Yes | Yes | Yes |
Scanning
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| Manual (on-demand) scans | Yes | Yes | Yes |
| Scheduled scans | - | Yes (1 policy) | Yes (unlimited) |
| Policy rules (configuration) | Yes | Yes | Yes |
Accounts & Identities
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| View accounts | Yes | Yes | Yes |
| Manage accounts | Yes | Yes | Yes |
| Manual identity linking | Yes | Yes | Yes |
| Automatic identity linking | - | Yes | Yes |
| Manual account classification | Yes | Yes | Yes |
| NHI Subtype tagging (connector-asserted + manual) | Yes | Yes | Yes |
| Built-in classification rules | - | Yes | Yes |
| Custom classification rules | - | - | Yes |
| Privileged Account Risk Score | Yes | Yes | Yes |
| Risk score history (snapshot retention) | - | Yes | Yes |
| Archived Accounts / Archived Entitlements tabs | Yes | Yes | Yes |
| Audit History | Yes | Yes | Yes |
| Membership History (Entitlements) | Yes | Yes | Yes |
Key Risk Indicators
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| Basic KRIs (4 indicators) | Yes | Yes | Yes |
| Full KRI suite (all indicators) | - | Yes | Yes |
| KRI snapshots | - | Yes | Yes |
| KRI exceptions | - | - | Yes |
Community Edition KRIs
The Community edition includes these 4 KRIs:
- Privileged Without Owner - privileged accounts not linked to an identity
- Unlinked Accounts - all accounts without an identity
- Not in PAM Tool - privileged accounts not in the PAM inventory
- Standing Privileges - always-on privileged access
PAM Inventory
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| View PAM inventory | Yes | Yes | Yes |
| Manual PAM risk levels | Yes | Yes | Yes |
| PAM tool reconciliation | Yes | Yes | Yes |
| Custom PAM risk rules | - | - | Yes |
| PAM gap analysis | - | - | Yes |
Reports
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| In-app reports | Yes | Yes | Yes |
| CSV export | - | Yes | Yes |
| Reports via API | - | - | Yes |
Administration
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| User management | Yes | Yes | Yes |
| Audit logs | Yes | Yes | Yes |
| System settings | Yes | Yes | Yes |
| Licence management | Yes | Yes | Yes |
| API key management | - | - | Yes |
| SSO / OIDC authentication | - | - | Yes |
| Data Import/Export | - | Yes | Yes |
AI/Intelligence Layer
Not available on Community edition. On by default on Pro and Enterprise (an administrator can turn it off during Initial Setup, or at any time afterwards). Local-only Ollama runtime; no external AI provider. See AI Assistant (OrbisAI) for setup.
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| Onboarding Assistant (connector setup help) | - | Yes | Yes |
| Narrative Risk Summarisation | - | Yes | Yes |
| AI-Assisted Identity Linking | - | Yes | Yes |
| AI-Assisted PAM Inventory Linking | - | Yes | Yes |
| AI-Assisted Account Type / Identity Type Classification | - | Yes | Yes |
| AI-Assisted NHI Subtype Classification | - | Yes | Yes |
| AI-Assisted Privilege Detection / Service Privilege Detection | - | Yes | Yes |
| Access Graph Natural-Language Query | - | Yes | Yes |
| Threat Detection Clustering | - | - | Yes |
Real-Time Account & Entitlement Events
Not available on Community edition. Configurable per system from the Real-Time Events tab in the Add/Edit System dialog. The Active Directory track requires an Enterprise-only Endpoint Sensor deployed on the domain controller. See Real-Time Events for details.
| Feature | Community | Pro | Enterprise |
|---|---|---|---|
| Real-Time Account & Entitlement Events | - | Yes | Yes |
Supported OS Types by Edition
See Target Systems for the full list of supported system types with per-type edition requirements.
Activating a Licence
- Navigate to Administration > Licence
- Paste your licence key
- Click Preview to verify the details
- Click Activate
The licence takes effect immediately. No restart is required.
Deactivating a Licence
Click Deactivate on the licence page to revert to Community edition. Your data is preserved, but:
- Features beyond Community limits are locked (shown with a lock icon)
- Systems beyond the limit are not scanned
- Scheduled policies are paused
- Users beyond the limit cannot log in
Re-activate a licence at any time to restore access.
Licence Expiry
When a licence expires, the system reverts to Community edition behaviour. You will see a notification in the application. Renew your licence key and activate it to restore full access.
Obtaining a Licence
Contact your OrbisID account representative or visit the OrbisID website for pricing and licence key procurement.
Support
- Community edition support is provided via GitHub Issues: github.com/OrbisID/OrbisID-Community/issues/new/choose. The same link is available in-app from the user menu and from Administration > License.
- Pro / Enterprise support is via email, at your edition's support address (shown in-app on the Administration > License page).