> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corepillar.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Settings overview

> How Settings opens, which tabs each role sees, and what the General tab shows.

Settings belong to the organization, not to a project. Everything here applies to the organization you have selected in the header.

## Opening Settings

Select **Settings** at the bottom of the sidebar. It opens as a large window over the page you were on, so anything running underneath (a Cost Calculator run, for example) keeps going. Select **← Back to app** or press Escape to close it.

You can also open a settings URL directly, such as `/<org-slug>/settings/user-management`. A direct link shows the same window over your organization's first project. Ctrl-click or middle-click on the sidebar link opens it in a new tab.

Tabs appear as a row of buttons across the top of the window. Each tab loads on its own; if one fails you see "Couldn't load this section" with a retry button.

## Who sees Settings

Settings is visible only to admins and super admins. AI Builders and Users have no **Settings** link in the sidebar, and a direct settings URL sends them back to the organization.

| Tab | Super Admin | Admin (Owner or Admin) | AI Builder (Editor) | User (Viewer) |
| - | - | - | - | - |
| **General** | Yes | Yes | No | No |
| **User Management** | Yes | Yes | No | No |
| **SSO** | Yes | No | No | No |
| **Tracing keys** | Yes | No | No | No |
| **Platform access** | Yes | No | No | No |

Hiding a tab is not the only protection. Every tab's data is loaded through a server check of the same rule, and a tab you are not entitled to returns "You don't have access to this section." or a not-found page.

<Note>
  Admins and super admins can also open Settings from ModelHub, with the same tabs per role. Everyone, whatever their role, signs out from the account menu at the bottom of the sidebar (select your name, then **Sign out**) and changes their avatar by selecting it there.
</Note>

| Tab | Guide |
| - | - |
| General | Below |
| User Management | [User Management](/agenthub/settings/user-management) and [Members and invites](/agenthub/settings/members) |
| SSO | [SSO with Okta](/agenthub/settings/sso-okta) |
| Tracing keys | [Tracing keys](/agenthub/settings/tracing-keys) |
| Platform access | [Platform access](/agenthub/settings/platform-access) |

There is also a [Model Catalog](/agenthub/settings/model-catalog) page that is not linked from the tab row.

## General

"Organization profile and plan details." Everything in the first panel is read-only.

| Field | What it shows |
| - | - |
| **Organization name** | The name given when the organization was created. |
| **Slug** | The URL slug, for example `acme-support`. |
| **Data residency region** | `US`, `EU`, or `APAC`. New organizations default to US. |
| **Plan** | `Standard` or `Enterprise`. New organizations default to Standard. |
| **Your role** | Your role in this organization: Owner, Admin, Member (the Editor role), or Viewer. |

There is no screen to rename an organization or change its region or plan.

### End-to-end encryption

The second panel controls end-to-end encryption for ModelHub chats.

| State | What you see |
| - | - |
| Not set up, you are a super admin | "Chats are stored unencrypted. Once set up, new chats are readable only by their author and superadmins. Lose every passphrase and they can't be recovered." and **Set up encryption**. |
| Not set up, you are not a super admin | "Not set up yet. A superadmin has to enable it." |
| On | "New chats are readable only by their author and" the enrolled super admins, plus **Set passphrase** (or **Rotate key** once you have one). |
| Enrolled | Your key's short ID and whether it is unlocked on this device, with **Unlock on this device** or **Lock this device**. |

Setting a passphrase opens **Set your encryption passphrase**. The passphrase must be at least 12 characters, typed twice, and you must tick "I understand this passphrase cannot be recovered or reset." Your key is generated in the browser and locked with the passphrase, which never leaves your device. There is no recovery: if a member forgets theirs, past chats can only be read by the organization's super admins, and if every super admin loses theirs, encrypted chats cannot be recovered.

For how this affects employees, see [ModelHub settings](/modelhub/settings).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.