Skip to main content

Admin Management

Manage the administrators who have access to your Containment.AI dashboard and control their permissions.

Admin Overview​

Administrators can:

  • View the dashboard and alerts
  • Configure policies
  • Manage clients
  • Access settings (based on permissions)

Accessing Admin Management​

  1. Go to Settings
  2. Click Admins tab
  3. View and manage administrators

Admin List​

The admin list shows:

ColumnDescription
NameAdmin's display name
EmailWork email address
RolePermission level
StatusActive, Pending, or Inactive
Last ActiveMost recent login

Inviting Admins​

Send Invitation​

  1. Click Invite Admin
  2. Enter email address
  3. Select role/permissions
  4. Click Send Invitation

Invitation Email​

The new admin receives:

  • Welcome message
  • Dashboard link
  • Setup instructions
  • Organization name

Invitation Status​

StatusDescription
PendingInvitation sent, awaiting action
AcceptedAdmin completed setup
ExpiredNo action after 7 days

Admin Roles​

Built-in Roles​

RoleCapabilities
OwnerFull access, can't be removed
AdminFull access except billing
AnalystView and manage alerts
ViewerRead-only access

Role Permissions Matrix​

PermissionOwnerAdminAnalystViewer
View dashboard✓✓✓✓
Manage alerts✓✓✓✗
Configure policies✓✓✗✗
Manage clients✓✓✗✗
Manage admins✓✓✗✗
Manage billing✓✗✗✗
Delete organization✓✗✗✗

Custom Roles​

Enterprise

Create custom roles with specific permissions:

  1. Go to Settings > Permissions
  2. Click Create Role
  3. Name the role
  4. Select permissions
  5. Save

See Permissions for details.

Managing Admins​

Change Role​

  1. Click the admin's row
  2. In the detail drawer, click Edit Role
  3. Select new role
  4. Save changes

Deactivate Admin​

  1. Click the admin's row
  2. Click Deactivate
  3. Confirm action

Deactivated admins:

  • Cannot sign in
  • Lose dashboard access
  • Can be reactivated later

Remove Admin​

  1. Click the admin's row
  2. Click Remove
  3. Confirm removal

Removed admins:

  • Lose all access
  • Must be re-invited to regain access
  • Audit history preserved

Transfer Ownership​

As owner, transfer to another admin:

  1. Go to Settings > Account
  2. Find Transfer Ownership
  3. Select new owner
  4. Confirm with your password

Admin Activity​

View admin actions:

  1. Go to Activity
  2. Filter by actor type: "Admin"
  3. See all admin actions

Tracked actions:

  • Logins and logouts
  • Configuration changes
  • Alert management
  • User actions

Security​

Session Management​

Admins have secure sessions:

  • Automatic timeout after inactivity
  • Secure token storage
  • Device tracking

Forcing Logout​

Force an admin to re-authenticate:

  1. Click the admin's row
  2. Click End Session
  3. Admin must sign in again

Multi-Factor Authentication​

Enterprise

Require MFA via SSO:

  1. Configure in your IdP
  2. Enable SSO enforcement
  3. All admins must use MFA

Troubleshooting​

Admin Can't Sign In​

  1. Check admin status is "Active"
  2. Verify email address
  3. Try password reset
  4. Check SSO configuration (if used)

Wrong Permissions​

  1. Review assigned role
  2. Check custom permissions
  3. Verify role inheritance
  4. Contact owner if needed

Invitation Not Received​

  1. Check spam folder
  2. Verify email address
  3. Resend invitation
  4. Check email delivery

Best Practices​

Least Privilege​

  • Assign minimal necessary permissions
  • Use Viewer role when appropriate
  • Review permissions regularly

Access Reviews​

  • Audit admin list quarterly
  • Remove inactive admins
  • Verify role appropriateness

Documentation​

  • Document who has access
  • Note why each admin needs access
  • Track permission changes