Skip to main content

​
Security: SAML and SCIM

If you’re using an identity access management (IAM) solution like Microsoft Entra or Okta, start by setting up SAML 2.0 and SCIM in the security settings. See dedicated guides for Microsoft Entra or Okta. Additional security options:
  • Domain-based access: Allow users with specific email domains to join automatically
  • IP restrictions: Limit workspace access to specific IP ranges (CIDR notation)
  • User invitations: Control whether existing members can invite new users

​
Member, Group and Role Settings

Members: Manage users in member settings to change roles or invite users manually. Roles: Configure permissions for different roles in roles settings. Start with default permissions and adjust as needed. See permission recommendations. Groups: Create groups for teams or departments in group settings. Groups can sync from your IAM solution via SCIM.

​
General Workspace Settings

Configure basic workspace identity in general settings:
  • Workspace icon: Upload your company logo (displayed at 96x96px)
  • Workspace name: Your company or team name
  • Workspace description: Context about your company sent with every prompt (up to 10,000 characters)

​
Branding & Customization

Customize your workspace appearance in customization settings: Visual branding:
  • Primary color: Your brand hex color for buttons and highlights
  • Home background image: Custom image for the home screen
  • Workspace tagline: Short text displayed on home screen (max 200 characters)
  • Favicon URL: Custom favicon (dedicated deployments only)
  • Logo options: Show workspace logo in new chats, replace model logos with workspace logo
Chat settings:
  • Chat disclaimer: Warning text below the input field (max 128 characters)
Info boxes: Up to 3 boxes on the home screen with icon, title, description, and optional button link. Custom navigation links: Up to 4 links in the sidebar with predefined icons (link, help, support, info, idea, file, bug, confetti, star). Prompt recommendations: Up to 20 suggested prompts displayed to users. Sharing disclaimers:
  • Assistant sharing disclaimer (max 280 characters, Markdown supported)
  • Knowledge folder sharing disclaimer (max 280 characters, Markdown supported)

​
Model Configuration

Configure default and available models in model settings:
  • Default chat model: Model used for new conversations
  • Default image generation model: Model for image creation
  • Default embedding model: Model for knowledge processing
  • Deep research models: Backbone, reasoning, and fast reasoning models (BYOK only)
  • Active models: Enable or disable specific models for your workspace

​
Product Capabilities

Control which features are available to users: Chat capabilities (chat settings):
  • Web search
  • Image generation
  • Code interpreter
  • Canvas
  • Chat sharing
  • Memory (and whether enabled by default)
  • Transcription
Assistant capabilities (assistant settings):
  • Web search, image generation, code interpreter, canvas (with default-on options)
  • Source restriction
  • User info sharing
  • Tracing configuration
Workflow settings:
  • Code node and HTTP node access
  • Spend limits (per workflow and workspace-wide)

​
Product Access Control

For each product (Chat, Assistants, Workflows, Deep Research, Company Knowledge), configure:
  • General access for all workspace members
  • Restricted access for specific roles or groups
  • Data retention period for chats

​
Filling the Prompt and Agent Libraries

Give users a head start with example use cases:
  • Add workspace-level agents (help chatbots, specialized assistants)
  • Create shared prompts (email templates, grammar correction, translation)
  • Find inspiration in agent templates
Present these in onboarding workshops and check-ins with your users.