Use Admin > System Configuration to control how the whole platform behaves: whether scheduled workflows run, how many ANY API tables load at once, what maps may plot, whether connectors keep stored secrets, and which hosts custom visuals may reach. The switches here ask you to confirm each change before it applies.
The settings on this page sit in System Configuration, on three tabs:
Some platform settings live on their own screens. The company name is edited on Branding; Global 2FA and Idle Logout are edited on Security; PII detection has its own tab. See Branding and themes, Sign-in security and PII detection.
Pause the scheduler when no scheduled workflow should start, for example during maintenance.
While the scheduler is off, the panel reads Paused - workflows will not execute. To resume, switch Workflow Scheduler on and click Confirm in Enable Scheduler: "Are you sure you want to enable the scheduler? Scheduled workflows will resume." The panel then reads Active - workflows run on schedule.
Pausing stops scheduled runs and automatic retries of failed runs. A workflow you start by hand still runs. See Schedules and when a workflow starts and Run a workflow by hand.
Health Check checks the platform's core services on a regular schedule and records their status. You read the results in Live Metrics, where each service's health and daily uptime history appear.
The panel reads Active - system is monitored or Disabled - monitoring paused. While it is off, no checks are recorded, so those days show as No data in Live Metrics.
ANY API Concurrent Loads sets how many ANY API tables may load at the same time across all workflows. A higher number loads faster but uses more memory on the database side.
Up to <n> ANY API tables now load at once. appears, with your number in place of <n>.Enter a whole number from 1 to 25. Any other value shows "Enter a whole number between 1 and 25.", and Save stays off until the number is valid. If the save fails, the panel shows "Failed to update ANY API concurrent loads".
Across all workflow runs, the platform runs up to 25 data steps at once; gate steps do not count. Within that limit, your value caps how many ANY API tables load at once, and a workflow's batch size above the value is capped by it. See Create and edit a workflow and Connect any API.
The Maps tab holds two switches for DataPrism Map visuals. Both are on by default.
The dialogs spell out the effect. Turning a switch off warns that charts stop showing their data until the setting is allowed again: "Charts that plot latitude and longitude will stop showing their data until coordinates are allowed again." and "Charts that draw a Geometry field will stop showing their data until shapes are allowed again." Turning a switch on reads {title} become available to every DataPrism Map visual in the organization., with the setting's name in place of {title}. A successful change confirms with {title} allowed. or {title} turned off.; if it fails, the panel shows "Failed to update the map settings".
Maps do not look up street addresses. Use place names, or Latitude and Longitude for exact positions. See Map visual.
Use this setting to stop someone with edit rights from sending a stored password or key to a different server. It is off by default.
While it is on, changing a connector's host, URL, account or username clears the stored password or key in the form. Type it again before you save. While it is off, the panel reads Off - stored secrets are kept after a host change. To allow stored secrets again, switch the setting off and click Confirm in Keep connector secrets after a host change, which notes that editing a connector reuses its stored password or key even when those fields change. See Connect a database.
Custom visuals may load images, open links and embed players only from the hosts on the Sandbox Allowed Hosts list. The panel explains: "Visuals may load images, open links and embed players from these hosts. A visual can place row values in such URLs, so list only hosts you trust."
example., type a host pattern. Optionally, type a note in Note (optional).{pattern} added to the allowlist. confirms the new row, with your pattern in place of {pattern}.To remove a host, click the trash icon on its row and click Remove in the Remove {pattern} dialog: "Visuals will no longer be able to reach {pattern}. This cannot be undone."
Patterns follow these rules:
example. allows the host and its subdomains; *. allows subdomains only; * allows every host on the internet.Each row shows the pattern, its note, who added it and when. Rows marked Seeded came with the platform, and you can remove them like any other row. Before anything is added, the list reads "No hosts on the allowlist yet." If the list does not load, it shows "Failed to load the allowed hosts." with Retry, and a failed change shows "Failed to add host" or "Failed to remove host". Other messages are listed in Administration troubleshooting.
* allows every host on the internet. A visual could then load images, open links or embed players from anywhere, including hosts nobody has reviewed. The form shows a warning as soon as you type it. Add only the hosts you trust.
See Custom visuals and the visual library for what a visual may load.
| Setting | What it does | Default |
|---|---|---|
| Workflow Scheduler | Runs scheduled workflows and automatic retries. When it is off, neither happens. | On |
| Health Check | Checks the platform's core services and records their status. | On |
| ANY API Concurrent Loads | Sets how many ANY API tables load at once across all workflows, from 1 to 25. | 10, unless your installation was set up with another value |
| Map coordinates | Lets DataPrism Map visuals plot latitude and longitude. | On |
| Map shapes from data | Lets DataPrism Map visuals draw shapes from a Geometry field. | On |
| Require re-entering connector secrets after a host change | Clears a connector's stored password or key when its host, URL, account or username changes. | Off |
| Sandbox Allowed Hosts | The hosts custom visuals may load images, open links and embed players from. | Comes with seeded hosts, marked Seeded, for example youtube. and vimeo. |
| Task | Permission |
|---|---|
| Open the Health and Maps tabs, and see the connector secret setting | System Settings Viewer |
| Change the scheduler, health check, ANY API limit, map switches or connector secret setting | System Settings Manager, together with System Settings Viewer to open the tab |
| See Sandbox Allowed Hosts | Password Policy Viewer |
| Add or remove hosts in Sandbox Allowed Hosts | Password Policy Manager |
Assign these permissions through a role. See Roles and permissions and Permission reference.
Switch Workflow Scheduler off in Admin > System Configuration > Health, then click Confirm. No scheduled workflow starts until you switch it back on, and automatic retries pause too. Workflows you start by hand still run.
Lower ANY API Concurrent Loads. Fewer tables then load at once, so less memory is used at the same time. The lowest value is 1.
Yes. Switch Map coordinates off. Maps then draw named places only, such as countries, regions, districts and cities. If your data holds shapes, switch Map shapes from data off too.
Require re-entering connector secrets after a host change is on, and you changed the connector's host, URL, account or username. Type the password or key again before you save.
Add the site to Sandbox Allowed Hosts. Use a wildcard pattern such as *. if the images come from several subdomains.
* to the allowed hosts?No, unless you accept that any visual may load content from any site. The wildcard allows every host on the internet, including hosts nobody has reviewed.
Hosts are managed with the Password Policy Manager permission, not System Settings Manager. Ask an administrator to give you that permission, or to add the host for you.
It checks the platform's core services and records their status. You read the results in Observability > Live Metrics. Turning it off pauses the checks and their records until you turn it back on.
Those settings live on other screens: the company name on Branding (Branding and themes), Global 2FA and Idle Logout on Security (Sign-in security), and PII detection on its own tab (PII detection).
No. A save applies as soon as it goes through: the scheduler and the load limit are read on their next cycle, and map and connector changes are picked up straight away. New hosts apply within seconds.
Yes. An update never overwrites a setting that already exists: it only adds settings that are new to your installation, with their defaults. A value you saved stays as you left it.