Magic link sign-in, upgraded logging and customer API upgrades

Another solid one. Signing in gets a lot easier, your activity log gets a lot more detailed, and the API can finally manage users instead of just reading them.

Sign in without a password

You can now sign in with a magic link. Enter your email address and we'll send you a 6-digit code plus a direct sign-in link. No password to remember, no password to reset.

A few things worth knowing:

New users can activate their account and get straight in without ever creating a password. Prefer one anyway? You can set a password later from your profile.
You can steer individual users to a specific sign-in method (password, Microsoft 365 or magic link) on the user page or through the API. Leave it empty and their first choice becomes their default.
You decide which methods your organisation sees. Hide the ones you don't want under Settings → Appearance → Login. At least one method always stays visible, so you can't lock yourself out.
On a custom domain the sign-in link uses your own domain.

The sign-in screen itself is now email-first: you type your email address, and we show you the methods that apply to you.

Your activity log now tells the whole story

The activity log used to tell you who opened which report. It now tells you what they did, where they did it from, and under which permissions.

Every entry records the action (open or export), the source (web, mobile app, public embed, external embed or AFAS), the IP address, the browser or device, and the RLS roles that were actually applied for that user on that view. And it's no longer limited to Power BI reports: PDFs, files and AI agents are logged too.

Together with the Power BI embed token ID, that gives you a complete audit trail you can join with the Power BI activity log. Handy detail: entries created before this release keep their old values, so anything from today onwards is the full picture.

The API can now manage your organisation

Until now the customer API could read your content. It can now do the administration as well.

Users: list them, create or update a user by email address (name, role, group memberships, language, default sign-in method, with or without an invitation email), and delete them.
User groups: create, rename, delete, and add or remove members by email address.
Assignments: read report groups per user group, users per user group, and content per user group and per report group.
Activity log: retrieve it with date filters and paging.
API request log: every API call with endpoint, status code, duration and error message, so you can check whether your nightly sync actually did what you think it did. Ask for only the failures if that's all you need.

Create an API key under Settings → API keys. The documentation is at connect.datatako.com.

Other changes

Management forms now have a description field, so you can explain the form to the people filling it in.
The search function can be switched off per organisation under Settings → Appearance → Layout.
AI agents on the newest Claude models were failing on every request. Fixed. System prompts also got roomier: 16,000 characters instead of 8,000.