Administer Decision Terrain

Admin and team docs are for workspace owners, organization admins, and operators who manage more than one agent or more than one user.

What admins manage

• Organization membership, seats, roles, and licensing context.
• Enterprise SAML or OpenID Connect login and enforcement.
• Which agents belong to a person or organization.
• Collaborator access and ownership transfers.
• Contact access, allowlists, and invites.
• Global or organization secrets.
• Organization-scoped MCP servers and connected capabilities.
• System skills and profiles where available.
• Usage and licensing.

Administration guides

• Roles And Permissions: company and Team responsibilities.
• Enterprise SSO and Directory Provisioning: verified domains, login, emergency recovery, and SCIM.
• Access Policy And Sessions and Access Reviews: enforcement, offboarding, and recorded access decisions.
• Audit And Evidence and Data Retention: investigation, exports, and cleanup.
• Configure External Security: SIEM audit forwarding and optional scoped response, with administrator and operator setup paths.
• Approved Destinations: approve model endpoints, providers, hosts, and recipients, and learn when an agent reaches a new one.
• Organization Email: sending service, delivery tests, and review policy.
• API Spec Integrations: publish provider operations with credentials and write controls.

Recommended admin setup

1. Create or select the organization.
2. Add seats and invite members.
3. Decide which agents belong to the organization.
4. Configure shared secrets and MCP servers only where needed.
5. Set contact and collaborator policies.
6. Configure and test identity, access policy, and recovery before requiring them.
7. Review audit coverage and retention before starting cleanup.
8. Review usage and billing after the first real workflows run.

For ordinary day-to-day work inside a single agent, see Using the platform.