Establishing Setting's permissions enables you to control what settings users can alter within a workspace based on their roles. Rather than providing unrestricted access, you have the option to grant specific permissions associated with particular tasks. Take, for instance, a user responsible for file uploads; you can allocate permissions to change settings strictly related to file upload while limiting access to other sensitive workspace settings. Managing permissions with such precision can enhance security, mitigate the risk of inadvertent alterations, and streamline the distribution of duties throughout the workspace.
{% hint style="info" %} All settings have permissions to determine which users can access them. {% endhint %}
To access the settings,
- Navigate to Administration > Workspace > Permissions > Settings.
| Name | Codebase Name | Description |
|---|---|---|
| General > REST API > Allow Getting Everything | API_Allow_Infinite_Count | Allow REST API requests to return all results in one call. |
| General > REST API > CORS Origin | API_CORS_Origin | |
General > REST API > Apply permission view-outside-room to api users.list | API_Apply_permission_view-outside-room_on_users-list | Temporary setting to enforce view-outside-room permission to users. |
| General > REST API > Default Count | API_Default_Count | The default count for REST API results if the consumer did not provided any |
| Message > Embed Cache Expiration Days | API_EmbedCacheExpirationDays | Embed Cache Expiration Days. |
| Message > Embed Request User Agent | API_Embed_UserAgent | |
| Message > API_Embed_clear_cache_now | API_Embed_UserAgent | |
| Message > Safe Ports | API_EmbedIgnoredHosts | List of hosts or CIDR addresses, eg. localhost, 127.0.0.1, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 |
| OAuth > Drupal > Drupal Server URL | API_Drupal_URL | Example: https://domain.com (excluding trailing slash |
| Embed Link Previews | API_Embed | Whether embedded link previews are enabled or not when a user posts a link to a website |
| Accounts | ||
| Accounts > Allow Anonymous Read | Accounts_AllowAnonymousRead | |
| Accounts > Allow Anonymous Write | Accounts_AllowAnonymousWrite | |
| Accounts > Allow Users to Delete Own Account | Accounts_AllowDeleteOwnAccount | |
| Accounts > Allow Email Change | Accounts_AllowEmailChange | |
| Accounts > Allow Email Notifications | Accounts_AllowEmailNotifications | |
| Accounts > Allow Invisible status option | Accounts_AllowInvisibleStatusOption | |
| Accounts > Allow Password Change | Accounts_AllowPasswordChange | |
| Accounts > Allow Password Change for OAuth users | Accounts_AllowPasswordChangeForOAuthUsers | |
| Accounts > Allow Name Change | Accounts_AllowRealNameChange | |
| Accounts > Allow User Avatar Change | Accounts_AllowUserAvatarChange | |
| Accounts > Allow User Profile Change | Accounts_AllowUserProfileChange | |
| Accounts > Allow Custom Status Message | Accounts_AllowUserStatusMessageChange | |
| Accounts > Allow Username Change | Accounts_AllowUsernameChang | |
| Accounts > Registration > Allowed DomainsList | Accounts_AllowedDomainsList | |
| Accounts > Avatar > Block Unauthenticated Access | Accounts_AvatarBlockUnauthenticatedAccess | Block Unauthenticated Access to Avatars |
| Accounts > Avatar > Avatar cache time | Accounts_AvatarCacheTime | Number of seconds the http protocol is told to cache the avatar images. |
| Accounts > Avatar > Resize Avatars | Accounts_AvatarResize | |
| Accounts > Avatar > Avatar Size | Accounts_AvatarSize | |
| Accounts > Registration > Blocked Domain List | Accounts_BlockedDomainsList | Comma-separated list of blocked domains. |
| Accounts > Avatar > Resize Avatars | Accounts_AvatarResize | |
| Accounts > Avatar > Avatar External ProviderUrl | Accounts_AvatarExternalProviderUrl | Avatar External Provider URL |
| Accounts > Registration > Blocked Username List | Accounts_BlockedUsernameLis | Comma-separated list of blocked usernames (case-insensitive) |
| Accounts > Registration > Accounts_CustomFields_Description | Accounts_CustomFields_Description | Should be a valid JSON where keys are the field names containing a dictionary of field settings |
| Accounts > Custom Fields to Show in User Info | Accounts_CustomFieldsToShowInUserInfo | Custom Fields to Show in User Info. |
| Accounts > Registration > Default Username Prefix Suggestion | Accounts_DefaultUsernamePrefixSuggestion | Default Username Prefix Suggestion |
| Accounts > Default User Preferences > Also Send Thread To Channel Description | Accounts_Default_User_Preferences_alsoSendThreadToChannel | Allow users to select the Also send to channel behavior |
| Accounts > Default User Preferences > Collapse Embedded Media by Default | Collapse_Embedded_Media_By_Default | Collapse Embedded Media by Default |
| Accounts > Default User Preferences > Accounts > Convert ASCII to Emoji | Convert_Ascii_Emojis | Convert ASCII to Emoji |
| Accounts > Default User Preferences > Accounts > Desktop Notification Require Interaction | Notification_RequireInteraction | Require Interaction to Dismiss Desktop Notification |
| Accounts > Default User Preferences > Accounts > Email Notification Mode | Email_Notification_Mode | Offline Email Notifications |
| Accounts > Default User Preferences > Accounts > Enable Auto Away | Enable_Auto_Away | Enable Auto Away |
| Accounts > Default User Preferences > Hide Flex Tab | Hide_flextab | Hide Contextual Bar by clicking outside of it |
| Accounts > Default User Preferences > Accounts > Hide Roles | Hide_roles | Hide Roles |
| Accounts > Default User Preferences > Accounts > Hide Usernames | Hide_usernames | Hide Usernames |
| Accounts > Default User Preferences > Accounts > Idle Time Limit | Idle_Time_Limit | Period of time until status changes to away. Value needs to be in seconds. |
| Accounts > Default User Preferences > Accounts > Mute Focused Conversations | Mute_Focused_Conversations | Mute Focused Conversations |
| Accounts > Default User Preferences > Accounts > New Message Notification | New_Message_Notification | New Message Notification |
| Accounts > Default User Preferences > Accounts > New Room Notification | New_Room_Notification | New Room Notification |
| Accounts > Default User Preferences > Accounts > Notifications sound volume | Notifications_Sound_Volume | Notifications sound volume |
| Accounts > Default User Preferences > Accounts > Push Notifications | Accounts_Default_User_Preferences_pushNotifications | Push Notifications Default Alert |
| Accounts > Default User Preferences > Accounts > Save Mobile Bandwidth | Save_Mobile_Bandwidth | Save Mobile Bandwidth |
| Accounts > Default User Preferences > Accounts > Display Avatars in Sidebar | Display_Avatars_Sidebar | Display Avatars in Sidebar |
| Accounts > Default User Preferences > Accounts > Group by Type | Group_by_Type | Group by Type |
| Accounts > Default User Preferences > Accounts >Use Emojis | Use_Emojis | Use Emojis |
| Accounts > Default Directory Listing | Accounts_Directory_DefaultView | Default Directory Listing |
| Accounts > Accounts_EmailOrUsernamePlaceholder | Placeholder_for_email_or_username_login_field | Placeholder for Email or Username Login Field |
| Accounts > Registration > Only allow verified users to login | Accounts_EmailVerification | Allow onlly verified users to login |
| Email > Registration > Enrollment Email | Accounts_Enrollment_Email | Enrollment Email |
| Email > Registration > Accounts_Enrollment_Email Subject | Accounts_Enrollment_Email_Subject_Default | Accounts Enrollment Email Subject |
| Accounts > Forget User Session on Window Close | Accounts_ForgetUserSessionOnWindowClose | Forget User Session on Window Close |
| Accounts > Iframe > Api Method | Accounts_Iframe_api_method | Api Method |
| Accounts > Iframe > API URL | Accounts_Iframe_api_url | API URL |
| Accounts > Login Expiration in Days | Accounts_LoginExpiration | Login Expiration in Days |
| Accounts > Registration > Manually Approve New Users | Accounts_ManuallyApproveNewUsers | Manually Approve New Users |
| OAuth > Apple > Accounts_OAuth_Apple_Id | Accounts_OAuth_Apple | Enable Apple Login |
| OAuth > Drupal > Drupal Login Enabled | Accounts_OAuth_Drupal | Drupal Login Enabled |
| OAuth > Drupal > Drupal oAuth2 Redirect URI | Accounts_OAuth_Drupal_callback_url | Drupal oAuth2 Redirect URI |
| OAuth > Drupal > Drupal oAuth2 Client ID | Accounts_OAuth_Drupal_id | Drupal oAuth2 Client ID |
| OAuth > Drupal > Drupal oAuth2 Client Secret | Accounts_OAuth_Drupal_secret | Drupal oAuth2 Client Secret |
| OAuth > Facebook > Facebook Login | Accounts_OAuth_Facebook | Facebook Login |
| OAuth > Facebook > Facebook App ID | Accounts_OAuth_Facebook_id | Facebook App ID |
| OAuth > Facebook > Facebook Callback URL | Accounts_OAuth_Facebook_callback_url | Facebook Callback URL |
| OAuth > GitHub Enterprise > OAuth Enabled | Accounts_OAuth_Github | Enable Github Oauth |
| OAuth > GitHub Enterprise > GitHub Enterprise Callback URL | Accounts_OAuth_GitHub_Enterprise_callback_url | GitHub Enterprise Callback URL |
| OAuth > GitHub Enterprise > Client Id | Accounts_OAuth_GitHub_Enterprise_id | Github Enterprise Client Id |
| OAuth > GitHub Enterprise > Client Secret | Accounts_OAuth_GitHub_Enterprise_secret | Github Enterprise Client Secret |
| OAuth > GitHub Enterprise > Client Id | Accounts_OAuth_Github_id | Github Enterprise Client Id |
| OAuth > GitHub > Client Secret | Accounts_OAuth_Github_secret | Github Enterprise Client Secret |
| OAuth > GitHub > GitHub Enterprise Callback URL | Accounts_OAuth_Github_callback_url | GitHub Callback URL |
| OAuth > GitHub > Client Id | Accounts_OAuth_Github_id | Github Client ID |
| OAuth > GitHub > OAuth Enabled | Accounts_OAuth_Github | OAuth Enabled |
| OAuth > GitLab > OAuth Enabled | Accounts_OAuth_Gitlab | OAuth Enable |
| OAuth > GitLab > GitLab Callback URL | Accounts_OAuth_Gitlab_callback_url | GitLab Callback URL |
| OAuth > GitLab > GitLab Id | Accounts_OAuth_Gitlab_id | GitLab Id |
| OAuth > GitLab > Identity Path | Accounts_OAuth_Gitlab_identity_path | GitLab Identihty Pat |
| OAuth > GitLab > Merge Users | Accounts_OAuth_Gitlab_merge_users | GitLab Merge Users |
| OAuth > GitLab > Client Secret | Accounts_OAuth_Gitlab_secret | GitLab Client Secret |
| OAuth > Linkedin > LinkedIn Login | Accounts_OAuth_Linkedin | LinkedIn Login |
| OAuth > Linkedin > Linkedin Callback URL | Accounts_OAuth_Linkedin_callback_url | Linkedin Callback URL |
| OAuth > Linkedin > LinkedIn Id | Accounts_OAuth_Linkedin_id | LinkedIn Id |
| OAuth > Linkedin > LinkedIn Secret | Accounts_OAuth_Linkedin_secret | LinkedIn Secret |
| OAuth > Meteor > Meteor Login | Accounts_OAuth_Meteor | Meteor Login |
| OAuth > Meteor > Meteor Callback URL | Accounts_OAuth_Meteor_callback_url | Meteor Callback URL |
| OAuth > Meteor > Meteor Id | Accounts_OAuth_Meteor_callback_url | Meteor Callback URL |
| OAuth > Meteor > Meteor Id | Accounts_OAuth_Meteor_id | Meteor Id |
| OAuth > Meteor > Meteor Secret | Accounts_OAuth_Meteor_secret | Meteor Secret |
| OAuth > Nextcloud > OAuth Enabled | Accounts_OAuth_Nextcloud | OAuth Enabled |
| OAuth > Nextcloud > Nextcloud Server URL | Accounts_OAuth_Nextcloud_URL | Nextcloud Server URL |
| OAuth > Nextcloud > Nextcloud Callback | Accounts_OAuth_Nextcloud_callback_url | Nextcloud Callback URL |
| OAuth > Nextcloud > Nextcloud Id | Accounts_OAuth_Nextcloud_id | Nextcloud Id |
| OAuth > Nextcloud > Client Secret | Accounts_OAuth_Nextcloud_secret | Client Secret |
| OAuth > Proxy > Proxy Host | Accounts_OAuth_Proxy_host | Proxy Host |
| OAuth > Proxy > Proxy Services | Accounts_OAuth_Proxy_services | Proxy Services |
| OAuth > Tokenpass > Tokenpass Login | Accounts_OAuth_Tokenpass | Tokenpass Login |
| OAuth > Tokenpass >Tokenpass Callback URL | Accounts_OAuth_Tokenpass_callback_url | Tokenpass Callback URL |
| OAuth > Tokenpass > Tokenpass Id | Accounts_OAuth_Tokenpass_id | Tokenpass Id |
| OAuth > Tokenpass > Tokenpass Secret | Accounts_OAuth_Tokenpass_secret | Tokenpass Secret |
| OAuth > Twitter > Twitter Login | Accounts_OAuth_Twitter | Twitter Login |
| OAuth > Twitter > Twitter Callback URL | Accounts_OAuth_Twitter_callback_url | Twitter Callback URLL |
| OAuth > Twitter > Twitter Id | Accounts_OAuth_Twitter_id | Twitter Id |
| OAuth > Twitter > Twitter Secret | Accounts_OAuth_Twitter_secret | Twitter Secret |
| OAuth > WordPress > WordPress Login | Accounts_OAuth_Wordpress | WordPress Login |
| OAuth > WordPress > Authorize Path | Accounts_OAuth_Wordpress_authorize_path | Wordpress Authorize Path |
| OAuth > WordPress > WordPress Callback URL | Accounts_OAuth_Wordpress_callback_url | WordPress Callback URL |
| OAuth > WordPress > WordPress Id | Accounts_OAuth_Wordpress_id | WordPress Id |
| OAuth > WordPress > Identity Path | Accounts_OAuth_Wordpress_identity_path | Identity Path |
| OAuth > WordPress >Identity Token Sent Via | Accounts_OAuth_Wordpress_identity_token_sent_via | Identity Token Sent |
| OAuth > WordPress > WordPress Secret | Accounts_OAuth_Wordpress_secret | WordPress Secret |
| OAuth > WordPress > Scope | Accounts_OAuth_Wordpress_scope | Wordpress scope |
| Layout > Login > Show Default Login Form | Accounts_ShowFormLogin | Show Default Login Form. |
| Outlook calendar | Outlook_calendar | Outlook calendar |
| Accounts > Iframe > Enabled | Accounts_iframe_enabled | Enable Iframe |
| Accounts > Iframe > Iframe URL | Accounts_iframe_url | Iframe URL |
| Email > Privacy > Add Sender to Reply-To | Add_Sender_To_ReplyTo | Add Sender to Reply-To |
| General > Allow Invalid Self-Signed Certs | Allow_Invalid_SelfSigned_Certs | Allow Invalid Self-Signed Certs |
| Setup Wizard > Organization Info > Allow Marketing Emails | Allow_Marketing_Emails | Allow Marketing Emails |
| Mobile > Allow Save Media to Gallery | Allow_Save_Media_to_Gallery | Allow Save Media to Gallery |
| Analytics | Analytics | Analytics |
| Analytics > Features Enabled > Analytics_Messages | Analytics_features_messages | Tracks custom events related to actions a user does on messages |
| Analytics > Features Enabled > Analytics_Rooms | Analytics_features_rooms | Tracks custom events related to actions on a channel or group (create, leave, delete). |
| Analytics > Features Enabled > Analytics_Users | Analytics_features_users | Tracks custom events related to actions related to users (password reset times, profile picture change, etc). |
General > Apps > Directory for storing apps source package | Apps_Framework_Source_Package_Storage_FileSystem_Path | Directory for storing apps source package |
| General > Apps > Apps' Source Package Storage type |