Administration
Administrators manage tenant-wide settings. Personal access tokens are available to every signed-in user.
Users and Access
Assign roles, pipeline/deployment scope, and policy ownership. New users are Viewers with no scope. See Access Control.
Users manage PATs under Settings > Access Tokens. Copy new secrets immediately; rotation revokes the old value. Token changes require interactive sign-in; authorized PAT requests can read metadata. See capabilities and expiry or privileged token tasks.
Audit Logs
The Administrator-only application-log viewer starts with 512 newest matching records, refreshes continuously, and keeps the newest 10,000 in the browser. Older records remain stored until retention expires.
Search message/target text, set minimum severity, filter audit records, and choose compact/comfortable spacing. Auto-scroll follows new entries; Top and Bottom navigate the view.
Copy/Download export visible filtered records. Clear empties the browser view without deleting stored logs; Refresh reloads the server window. Sensor logs use the same viewer without the audit-only filter.
Log Settings
| Retention | Default | Range |
|---|---|---|
| Team Server logs | 14 days | 1–3,650 days |
| Sensor logs | 14 days | 1–3,650 days |
| Integration run history | 90 days | 1–3,650 days |
Keep log_prune confirm:true scheduled; setting changes take effect when pruning runs.
Pipeline Settings
| Setting | Default | Range |
|---|---|---|
| Days Until Stale | 14 days | 1–365 days |
| Build Discovery Hours | 1 hour | 1–168 hours |
Staleness uses the latest build’s provider-authored creation/start time, not discovery time. Lookback controls provider queries. Keep status_reconcile enabled; see protection calculations.
Policy Variables
Manage shared values under Administration > Policy Variables. Review affected policies before saving; see Policy Variables.