Administration

Administration is where you control who can sign in, what each person can open and change, and how DataMind OS behaves. Use it to set up users and roles, tighten sign-in security, connect AI, and manage notifications, PII detection, themes and, where it is available, the platform.

Open Administration

In the sidebar, click Admin.
Choose a tab in the row along the top of the page.

Administration lives at the address /admin. Its sections are users, roles, ai-configuration, oda, system-configuration, pii-detection, notifications, color-themes and platform; the Profile Management tab covers users and roles.

You can also click the Administration card on the Dashboard, in the Operate & govern group. The card also offers Add user and Add roles, if you may create users or roles.

What each tab holds

Tab	What it holds
Profile Management	The Users and Roles sub-tabs. See Users and Roles.
AI Configuration	The AI connection to Kartlos, the models people may use, and the privacy and policy settings. See AI configuration.
Oda	Company-wide DataMind Oda settings for every Oda user, plus the MCP servers and skills you push to them. See DataMind Oda settings and MCP servers and skills.
System Configuration	The sub-tabs Health, Branding, Security, Maps and SSO. See Sign-in security, Single sign-on (SSO) and Scheduler, health, maps and connector safety.
PII Detection	The sub-tabs Policy, Rules and Playground. See PII detection.
Notifications	The sub-tabs Channels and Subscriptions. See Notifications.
Theme Configuration	The theme gallery and the theme playground. See Branding and themes.
Platform	The sub-tabs Services, Updates and Logs. See Platform, plus Platform services, Update DataMind OS and Read container logs.

Set up DataMind OS for your company

Work through these steps in order. Each one links to its page.

In Notifications > Channels, add an Email channel so new users receive their welcome email. See Notifications.
In System Configuration > Security, set the password policy and the Global 2FA mode. See Sign-in security.
Create roles and give them permissions and table access. See Roles and permissions.
Add users. See Users.
Connect AI and choose which models people may use. See AI configuration.

Who can see each tab

Your access comes from your roles. A tab appears only when one of your roles grants a view permission for it. If none of your roles grants any of them, Admin does not appear in the sidebar.

Tab	Shown when you hold one of these view permissions
Profile Management	A permission that includes View Users for Users, such as Users Viewer, or View Roles for Roles, such as Roles Viewer
AI Configuration	AI Configuration Viewer
Oda	DataMind Oda Settings Viewer
System Configuration	System Settings Viewer, Password Policy Viewer or SSO Configuration Viewer
PII Detection	PII Configuration Viewer or System Settings Viewer
Notifications	Notifications Viewer
Theme Configuration	System Settings Viewer
Platform	A platform permission such as Platform Viewer, on installations that include the platform controls. See Platform.

Inside System Configuration, Health, Branding and Maps need System Settings Viewer, Security needs System Settings Viewer or Password Policy Viewer, and SSO needs SSO Configuration Viewer. If your role holds only Password Policy Viewer, System Configuration shows the password policy and the allowed hosts list, and nothing else.

To open most tabs, an administrator can grant these presets:

Admin Configurator or Admin Viewer, in the Administration category. Admin Configurator manages AI, system settings, SSO, DataMind Oda settings, notifications, password policy and appearance. Admin Viewer gives view-only access to the same areas, except appearance.
Users Administrator or Users Viewer, and Roles Administrator or Roles Viewer, in the Users & Roles category.
PII Administrator or PII Auditor, in the PII category.

Permissions come in three tiers: High-Level presets, Standard permission sets and Granular permissions. To see how roles and permissions combine, read How access works.

Limits and edge cases

Each tab is independent. You can open Notifications without seeing Users.
If you can see roles but not users, Profile Management opens on Roles.
Admin reopens the tab you used last in this browser. An address under /admin that matches no section behaves the same way, and Users is the fallback when there is nothing to reopen. If you can no longer open that tab, Admin opens the first tab you can use, in the order of the tab row.
Addresses from older versions still work: one that pointed at system settings opens System Configuration, and any other configuration address opens AI Configuration.
Sub-tabs behave the same way across Administration: each area keeps its active sub-tab in the address and in this browser, a sub-tab you may not open is skipped, and clicking the sub-tab you are already on does nothing.
Administration works only on screens at least 768 px wide. On a phone you are sent to Minds. See DataMind OS on your phone.
If you open an admin page you may not use, you see Access Denied with the message "Sorry, you don't have permission to access this page. Please sign in or contact your administrator."

Questions, answered

Why is there no Admin item in my sidebar?

None of your roles grants a view permission for any Administration tab. Ask an administrator to give you one, for example Users Viewer or Admin Viewer.

Why can I open Admin, but some tabs are missing?

Each tab needs its own view permission, and only the tabs you may open are shown. See Who can see each tab above.

Can I see Roles without seeing Users?

Yes. Profile Management shows only the sub-tabs you may open. If you can see roles but not users, it opens on Roles.

Admin always opens on Notifications. How do I make it open on Users?

Admin reopens the tab you used last in this browser. Click Profile Management in the tab row. It opens on Users if you may see them, and Admin reopens there next time. The choice is saved in this browser only, so it does not follow you to another computer.

I saved an Admin address a while ago. Does it still work?

Yes. One that pointed at system settings opens System Configuration, and any other configuration address opens AI Configuration. An Admin address that matches no section opens the tab you used last in this browser, and Users if there is none.

Does a tab remember which sub-tab I was on?

Yes. Each tab keeps your last sub-tab in the address and in this browser. If that sub-tab is not one you may open, the tab opens on a sub-tab you can use.

Can I manage users from my phone?

No. Administration needs a screen at least 768 px wide. On a phone you are sent to Minds.

Where do I change my own password or turn on two-factor authentication?

Open your account menu and choose Profile. The pages Your profile and preferences and Two-factor authentication explain each setting.

Where are the DataMind Oda settings?

In the Oda tab. See DataMind Oda settings and MCP servers and skills.

What do I see when I open an admin page I may not use?

An Access Denied page. Click Go Back to return to the previous page, or Sign In to sign out and sign in again with an account that has access. Other messages are listed in Administration troubleshooting.