---
title: Administration
description: Run a Dashies workspace day to day - members and roles, billing, SAML single sign-on, SCIM provisioning, domain verification, and the audit log.
updated: 2026-08-05
---

These pages are for the person who **runs** a workspace rather than the person
who builds dashboards in it. Everything here needs the **admin** role in the
workspace you are administering.

If you are setting up a team for the first time and just want people in it, start
with [Work as a team](/guides/work-as-a-team) instead. It covers creating the
workspace, inviting people, and sharing a data source. This section picks up
where that leaves off.

## Where the settings are

Open **Settings**, switch into the workspace you administer, and the workspace's
own sections appear alongside your personal ones. The two that matter here are
**Plan** and **Security**.

If the Security section tells you **"You are not an admin here"**, you are a
member of that workspace rather than an admin. Ask an existing admin to change
your role. If it tells you to **switch into a workspace**, you are looking at
your personal account, which has no workspace settings of its own.

## The order to do things in

Single sign-on, provisioning, and domain verification interlock, and the product
lets you do them out of order. Doing them in this order avoids every dead end:

1. **[Turn on Enterprise](/admin/billing#enterprise-on-a-workspace)** for the
   workspace, and set its email domain. The Security section does not appear
   until the workspace is on Enterprise.
2. **[Verify the email domain](/admin/domain-verification)** with a DNS record.
3. **[Connect SAML single sign-on](/admin/sso)**.
4. **[Set up SCIM directory sync](/admin/scim)**, if you want joiners and leavers
   mirrored automatically.

:::warning{title="Steps 2 and 3 look independent and are not"}
The app will let you connect SAML **before** the domain is verified, and it will
report success. Sign-in will then fail for every user in your organization, with
the message "No SSO is configured for that domain", until you verify the domain.

Nothing turns red in the admin screen while this is true. Verify the domain
first.
:::

## The pages

- **[Members and roles](/admin/members)** - what each role can do, changing a
  role, removing someone, and what removal actually revokes.
- **[Billing and plans](/admin/billing)** - subscribing, managing or cancelling,
  and how a workspace gets Enterprise.
- **[Verify your email domain](/admin/domain-verification)** - the DNS record,
  and what a verified domain gates.
- **[SAML single sign-on](/admin/sso)** - connecting your identity provider, and
  what your users see.
- **[SCIM directory sync](/admin/scim)** - mirroring joiners and leavers, and the
  parts of SCIM Dashies does not implement.
- **[Audit log](/admin/audit-log)** - what is recorded, who can read it, and what
  it deliberately does not cover.

## What is not here

- **Per-viewer row-level security.** Everyone who can open a dashboard sees the
  same numbers. There is no per-viewer filtering of a published dashboard's data.
  See [Is Dashies right for you?](/start/is-dashies-right-for-you).
- **A seat pool to assign.** Pro is bought per person, on that person's own
  account. There is nothing for an admin to allocate. See
  [Billing and plans](/admin/billing#there-is-no-seat-pool).
- **Group-to-role mapping from your IdP.** SCIM creates people as members;
  admin is granted inside Dashies. See [SCIM directory sync](/admin/scim#what-is-not-supported).