Administration overview

Administration is where an institution’s Unifuse owners manage identity, access, sessions, data handling and student-contact rules. It is in the sidebar for anyone who holds at least one administration permission, and also reachable from Settings → Team & Roles.

Each tab is shown only to people with the permission it needs. The Admin role holds all of them.

Tab	What it is for	Permission
Single Sign-On	Connect the institution’s identity provider (OIDC or SAML).	manage institution
Sign-in policy	Which email domains may sign in, and whether to link existing accounts by email.	manage institution
SCIM Provisioning	Issue and revoke tokens so the identity provider can create, update and deactivate users.	manage SCIM
Roles	The permission matrix; create and delete roles.	manage roles
Users	Assign roles and sign people out.	manage users
Sessions	Idle timeout and maximum session length.	manage institution
Workspace	Connect Google Workspace or Microsoft 365 for document and calendar access. This is not sign-in. See Workspace.	manage connectors
Channels	SMS numbers and web-chat deployments. See Channels.	manage channels
Privacy requests	Erasure requests from people whose data the institution holds.	manage privacy requests
Data policy	Personal-data redaction mode and retention windows.	manage institution
Contact policy	Message budgets, quiet hours, channel order, assistant reply mode and opt-outs.	manage institution
Modules	Turn optional areas on or off: the Career hub and Voice input, both off by default. Voice input tells users that their browser vendor transcribes the audio.	manage institution

Every change made on these tabs is written to the audit log.

Related

• Roles and what they can see