Skip to main content
This article applies only to Self-Managed and Dedicated Cloud environments. The shared environment (Shared Cloud) is managed by Authlete and is out of scope for this document.
In a Dedicated Cloud or Self-Managed environment, day-to-day governance is handled through the Environment Admin role. This covers creating organizations, managing users across them, reviewing audit activity, and setting session policy. Environment Admin applies to the environment as a whole, one level above an individual organization. An Environment Admin has full access to User Management, Audit Logs, Security, and Environment Settings across every organization in the environment, including organizations they don’t belong to. Organization members continue to manage their own organizations as before.

​
Environment Admin and Platform Admin

  • Environment Admin is the delegated role described in these pages. You turn it on or off for each user in User Management.
  • Platform Admin is the administrator role with full access to the environment. Platform Admins already have everything described in these pages, so Environment Admin has no effect for them.
How the first Environment Admin is set up depends on your deployment. See Getting your first Environment Admin.

​
The Environment section in Console

Console shows an Environment section in the sidebar. Most of it appears only for Environment Admins and Platform Admins: A regular user (someone without Environment Admin or Platform Admin) sees only All Organizations, and it lists only the organizations they’re a member of. They have no visibility into or access to the other four pages.

​
What Environment Admins and Platform Admins can do