# Administration (/docs/use/portal/administration)



The **Administration** workspace is the Portal entry point for managing tenants, access, and tenant-wide settings. It appears only for platform administrators or administrators of at least one tenant. Tenant pages require administrator authority in the selected tenant. Baseline reads or delegated custom-role permissions alone do not open this workspace; pages and actions also enforce their operation permissions.

## Open the workspace [#open-the-workspace]

1. Open the workspace switcher and choose **Administration**.
2. For tenant-scoped work, choose the organization in **Tenant to manage**.
3. Check the selected tenant in the page header before making changes.

Tenant pages remain disabled until a tenant is selected. Platform-wide tenant lifecycle controls have separate permissions; opening Administration does not grant them.

## Find the right guide [#find-the-right-guide]

| Area                     | What it covers                                                                                  | Detailed guide                                              |
| ------------------------ | ----------------------------------------------------------------------------------------------- | ----------------------------------------------------------- |
| Access Control → Members | Add members, inspect their groups and roles, and remove ordinary membership                     | [Manage members](/docs/administration/members)              |
| Access Control → Groups  | Create functional groups, manage membership, and assign roles                                   | [Manage groups](/docs/administration/groups)                |
| Access Control → Roles   | Inspect system roles and create, edit, assign, or delete custom roles                           | [Manage roles and permissions](/docs/administration/roles)  |
| Tenant settings          | Retrieval, research limits, integrations, branding, Service Desk, and allowed resource profiles | [Tenant settings](/docs/administration/tenant-settings)     |
| Authentication           | Enterprise identity providers, callbacks, credentials, and group synchronization                | [Enterprise sign-in](/docs/administration/enterprise-login) |
| Tenants                  | Provision tenants, inspect lifecycle status, and delete tenants                                 | [Tenant lifecycle](/docs/administration#tenant-registry)    |

These task guides live under **Deploy & Operate → Administration**. Cluster health, upgrades, backup, and recovery are operational procedures, not additional pages in the Portal's Administration workspace.

## Related pages [#related-pages]

* [Portal](/docs/use/portal)
* [Administration and operations](/docs/administration)
* [Roles and permissions catalogue](/docs/reference/roles-permissions)