Administration

Administration happens in Settings, at the bottom of the sidebar. Its Platform section is for platform administrators and for accounts given platform roles; its Tenant section is for the administrators of the current tenant.

UsersCreate accounts, disable them, reset passwords, delete them.

Roles & permissionsPlatform roles, tenant roles and every permission.

TenantsCreate tenants, add members, manage a tenant without entering it.

SettingsIdentity, appearance, retention, connections, security, web access, logs, AI, API tokens, workers.

Audit logWho did what, and when.

NotificationsWhat notifies you, and how.

Who administers what

Who	What they can do
Platform administrator	Everything: every setting, every account, every tenant (they can enter any tenant and hold every permission there). Only platform administrators can create or change other platform administrators.
Account with platform roles	The parts of Settings › Platform their roles delegate (for example only Users, or only Audit log).
Member with the Administrator role of a tenant	Everything inside that tenant: its settings, members, roles, audit log, API tokens, plugins and data.
Member with other roles	What their roles give, inside the tenant.

Nobody can give more than they hold: creating or changing a role, and giving it to someone, requires holding every permission of that role yourself.