> ## Documentation Index > Fetch the complete documentation index at: https://developers.authlete.com/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > ### Authlete versions > Authlete 3.0 is the current version. Unless the user says they use another version, answer for Authlete 3.0 using the 3.x documentation. > Documentation for Authlete 2.x (pages under `/v2/` and `/ja/v2/`) is for the legacy version. Refer to it only when the user is on Authlete 2.x. > > ### Authlete architecture > Authlete is a backend engine for OAuth 2.0 and OpenID Connect processing. End users and client applications do not call it directly; the service provider's authorization server and API server call Authlete's APIs. Authlete handles protocol processing and token, client, and service management, while the service provider owns the OAuth/OIDC endpoints and user authentication. > See [Architecture](https://developers.authlete.com/get-started/introduction-to-authlete/architecture.md). > > ### Concepts > If the user is new to Authlete, read these pages first: > - [Request and Response](https://developers.authlete.com/get-started/concepts/request-and-response.md): Core API requests pass the client's request parameters as-is, and responses return `resultCode`, `action`, and `responseContent`. > - [Action Handling](https://developers.authlete.com/get-started/concepts/action-handling.md): Branch on `action`, never on `resultCode`, and map each action to the HTTP response your server returns. > - [Two-Step API Calls](https://developers.authlete.com/get-started/concepts/two-step-api-calls.md): Actions such as `INTERACTION` are completed with a second call (`/auth/authorization/issue` or `/auth/authorization/fail`) linked by a `ticket`. > - [Management API Overview](https://developers.authlete.com/get-started/concepts/overview.md): The Management API configures services, manages clients, and operates issued tokens, separately from the protocol flows handled by the Core API. > - [API Authentication](https://developers.authlete.com/get-started/concepts/authentication.md): Authlete APIs use bearer tokens: a Service Access Token (one service) or an Organization Token (the whole organization). # Delegated Admin > Explains the Environment Admin role, which lets Dedicated Cloud and Self-Managed administrators govern their own environment, and the Environment section of Console. > [!NOTE] > > This article applies only to Self-Managed and Dedicated Cloud environments. The shared environment (Shared Cloud) is managed by Authlete and is out of scope for this document. In a Dedicated Cloud or Self-Managed environment, day-to-day governance is handled through the Environment Admin role. This covers creating organizations, managing users across them, reviewing audit activity, and setting session policy. Environment Admin applies to the environment as a whole, one level above an individual organization. An Environment Admin has full access to [User Management](https://developers.authlete.com/configuration-reference/environment/user-management.md), [Audit Logs](https://developers.authlete.com/configuration-reference/environment/audit-logs.md), [Security](https://developers.authlete.com/configuration-reference/environment/security.md), and [Environment Settings](https://developers.authlete.com/configuration-reference/environment/environment-settings.md) across every organization in the environment, including organizations they don't belong to. Organization members continue to manage their own organizations as before. ## Environment Admin and Platform Admin * Environment Admin is the delegated role described in these pages. You turn it on or off for each user in [User Management](https://developers.authlete.com/configuration-reference/environment/user-management.md#granting-and-revoking-environment-admin). * Platform Admin is the administrator role with full access to the environment. Platform Admins already have everything described in these pages, so Environment Admin has no effect for them. How the first Environment Admin is set up depends on your deployment. See [Getting your first Environment Admin](https://developers.authlete.com/configuration-reference/environment/user-management.md#getting-your-first-environment-admin). ## The Environment section in Console Console shows an Environment section in the sidebar. Most of it appears only for Environment Admins and Platform Admins: | Page | Who sees it | | - | - | | All Organizations | Everyone | | [User Management](https://developers.authlete.com/configuration-reference/environment/user-management.md) | Environment Admins and Platform Admins only | | [Audit Logs](https://developers.authlete.com/configuration-reference/environment/audit-logs.md) | Environment Admins and Platform Admins only | | [Security](https://developers.authlete.com/configuration-reference/environment/security.md) | Environment Admins and Platform Admins only | | [Environment Settings](https://developers.authlete.com/configuration-reference/environment/environment-settings.md) | Environment Admins and Platform Admins only | A regular user (someone without Environment Admin or Platform Admin) sees only All Organizations, and it lists only the organizations they're a member of. They have no visibility into or access to the other four pages. ## What Environment Admins and Platform Admins can do | Function | Where | | - | - | | View organizations you're not a member of | [Environment Settings](https://developers.authlete.com/configuration-reference/environment/environment-settings.md#managing-organizations-in-the-environment) | | Rename or delete an organization | [Environment Settings](https://developers.authlete.com/configuration-reference/environment/environment-settings.md#managing-organizations-in-the-environment) | | Allow or restrict organization creation | [Environment Settings](https://developers.authlete.com/configuration-reference/environment/environment-settings.md#allowing-or-restricting-organization-creation) | | List every user in the environment | [User Management](https://developers.authlete.com/configuration-reference/environment/user-management.md) | | Remove a user from the environment | [User Management](https://developers.authlete.com/configuration-reference/environment/user-management.md#removing-a-user-from-the-environment) | | Grant or revoke Environment Admin (not for yourself) | [User Management](https://developers.authlete.com/configuration-reference/environment/user-management.md#granting-and-revoking-environment-admin) | | View environment-wide audit logs | [Audit Logs](https://developers.authlete.com/configuration-reference/environment/audit-logs.md) | | Configure session timeouts | [Security](https://developers.authlete.com/configuration-reference/environment/security.md) | This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.