# Administration overview

> Where the Administration page is in Unifuse, what each tab does, and which permission each tab needs.

Source: https://docs.unifuse.ai/administration/overview/

**Administration** is where an institution's Unifuse owners manage identity, access, sessions,
data handling and student-contact rules. It is in the sidebar for anyone who holds at least
one administration permission, and also reachable from **Settings → Team & Roles**.

Each tab is shown only to people with the permission it needs. The Admin role holds all of
them.

| Tab | What it is for | Permission |
|---|---|---|
| [Single Sign-On](/administration/single-sign-on/) | Connect the institution's identity provider (OIDC or SAML). | manage institution |
| [Sign-in policy](/administration/sign-in-policy/) | Which email domains may sign in, and whether to link existing accounts by email. | manage institution |
| [SCIM Provisioning](/administration/scim-provisioning/) | Issue and revoke tokens so the identity provider can create, update and deactivate users. | manage SCIM |
| [Roles](/administration/roles/) | The permission matrix; create and delete roles. | manage roles |
| [Users](/administration/users/) | Assign roles and sign people out. | manage users |
| [Sessions](/administration/session-policy/) | Idle timeout and maximum session length. | manage institution |
| Workspace | Connect Google Workspace or Microsoft 365 for document and calendar access. This is not sign-in. See [Workspace](/integrations/workspace/). | manage connectors |
| Channels | SMS numbers and web-chat deployments. See [Channels](/integrations/channels/). | manage channels |
| [Privacy requests](/administration/privacy-requests/) | Erasure requests from people whose data the institution holds. | manage privacy requests |
| [Data policy](/administration/data-policy/) | Personal-data redaction mode and retention windows. | manage institution |
| [Contact policy](/administration/contact-policy/) | Message budgets, quiet hours, channel order, assistant reply mode and opt-outs. | manage institution |
| Modules | Turn optional areas on or off: the **Career hub** and **Voice input**, both off by default. Voice input tells users that their browser vendor transcribes the audio. | manage institution |

Every change made on these tabs is written to the [audit log](/administration/audit-log/).

## Related

- [Roles and what they can see](/getting-started/roles/)