Admin Guide
Manage users, configuration, and organization security.
This section is for organization administrators responsible for team management and security policy.
Admin Capabilities
As an admin, you can:
- Manage users: Review authentication, set roles, and manage API keys.
- Control access: Set fine-grained permissions for roles, users, and tools.
- Configure servers: Browse the marketplace or add custom MCP servers for the entire organization.
- Set security policies: Define tool-level permissions and classifications.
- Review guardrails: See every protection applied to AI agent traffic - PII, secrets, prompt-injection, and phishing defenses - on the Guardrails page (under Access Control in the sidebar).
- Track devices: See the client devices and desktop apps connected to your organization on the Devices page.
- Audit changes: Inspect your organization's audit trail of configuration and security changes on the Observability → Logs page.
- Monitor activity: Track AI usage and data flows across all users.
Users
User roles, approval queues, and access management.
Access Control
Role assignments, server enablements, and element overrides.
Policy Rules (CEL)
Advanced logic for blocking, tagging, and governing tool usage.
Manage Connectors
Marketplace and custom server management.
MCP Quarantine
Automatically hold newly detected MCP servers until an admin approves them.
Monitoring Organization
Team-wide session tracking and agent dataflows.
Settings
Encryption keys, credentials, and organization preferences.
Admin vs. Enterprise
| Role | Responsibility |
|---|---|
| Admin (this guide) | Manages team access and security policies. |
| Enterprise | Manages server deployment, infrastructure, and SIEM integration. |
If you are deploying the SealGate server infrastructure, see the Enterprise section.