Administration - Getting Started

3 min read · Updated 3 Nov 2026

Select Administration in the lobby sidebar. It opens on a Search administration box, which matches a card’s title or its description, above a grid of cards, one per section, each with a View link. When nothing matches, the grid reads Nothing in Administration matches that.

Your role decides which cards are there. An owner or administrator sees all thirteen; a creator sees four of them. A designer or viewer has no Administration button in the sidebar, and opening its address returns Administration is available to the workspace owner and administrators, with restricted access for creators.

The thirteen sections

Each section has its own address in the app, under /administration/, so you can link to or bookmark one directly.

Section	What it is for
System Settings	Workspace appearance, access policies, provisioning, reporting limits, AI and IP ranges
Users	Who can join, and the role and license team they are in
Invitation Links	Invitation links for the workspace
Groups	User groups, which permissions can be given to, and the rules that assign people to them
License Teams	License teams, and which users are allocated to them
Tenant Permission Requests	Requested access to approve, reject or review
Enterprise Connection	Enterprise connections such as Okta, Entra and Google Workspace
3rd Party Integrations	Slack, Teams, SharePoint, S3, webhooks, Google Drive and the email providers that deliver reports
Embed Links	Your embedded analytics items and the domains allowed to host them
Content Security Policy	The external content allowed to load inside Astrato frames
License & Usage	Seat allocation, usage and your license
Media	Images and reporting templates shared across the workspace
Export	Tenant data, such as workbook and user information

Two jobs a new administrator does early are not cards here: to add people, see Invite users; to give one person access to one object, see Manage resource access.

What a creator can open

A creator sees Users, Groups, Tenant Permission Requests and Embed Links. Three of the four carry different copy for that role: Users reads Browse users, their roles and license teams., Groups reads Browse user groups and their members., and Embed Links reads Browse your embedded analytics items. Tenant Permission Requests keeps the description an administrator sees.

Users and group membership are read-only for a creator. Permission requests and embed links keep their own per-resource permission checks: a creator can approve or reject a request, and can edit or revoke an embed link, only where their own permissions cover the resource behind it. Changing user accounts, groups, assignment rules, workspace settings or the Allow list of domains that may host embeds requires an owner or administrator. A creator who opens the address of any other section is told This administration section is available to the workspace owner and administrators.

How the lists behave

Where a column can be filtered, a filter button sits beside its name, labelled Filter and the column name. Its menu is one checkbox per value, with Clear filter and Done; once values are selected, the button carries how many.

Long lists extend with Load more at the foot, labelled for what they load — Load more groups, Load more license teams, Load more media — and plain Load more on Users. Invitation Links and Tenant Permission Requests page instead, with Previous page and Next page, and Previous requests and Next requests. No Administration list has a rows-per-page selector.

System Settings

This section has six tabs: General, Appearance, Default view, Reporting, AI and IP ranges, each with its own address, such as /administration/system-settings/default-view/. System settings covers them all: the General toggles, SCIM provisioning and the OEM management API, lobby theming, the landing page each role gets, the reporting email integration and its limits, the AI providers behind Nash, and IP restriction. Administrator is the lowest role that can open it, so it is not one of the four sections a creator sees.