Docs menu
Administer
Sign-in, people and roles, licensing, and keeping the server healthy.
14 guides
Sign-in and access
- Single sign-on (OIDC)Set up OIDC single sign-on (SSO) to GraphnAI with Entra ID, Okta, Amazon Cognito or any OpenID Connect provider, with invites and just-in-time provisioning.
- Directory sign-in (LDAP)Sign in to GraphnAI with Active Directory using LDAP search-and-bind over LDAPS, with group-to-role access by SID and optional JIT account provisioning.Active Directory
- Manage sign-in methodsAdd, test, activate, replace and remove OIDC single sign-on (SSO) providers and directory sign-in after setup, from the Identity Providers page.
- Users and rolesRole-based access control (RBAC) in GraphnAI, with the Viewer, Operator and Admin roles, user and group grants, invites and deny-by-default access.
- Profile and sessionsHow GraphnAI sessions work, including sign-in duration, the idle timeout, the session policy, signing out devices, and ending any session as an administrator.
- API keysCreate domain-scoped API keys for OTel Collector authentication, choose scopes that map to roles, and revoke or rotate keys.
- Match operators to directory accountsHow GraphnAI matches sign-ins, escalation contacts and service accounts to directory accounts by objectGUID, and why automation waits for a confirmed match.
Licensing
- Licensing and plansWhat each GraphnAI plan includes, how locked features look, how the user count works, and how to apply or renew a license.
- The Public Preview licenseHow the GraphnAI Public Preview license works, including the 30-day trial, read-only mode at expiry, and how to apply or renew a license.
- License enforcementHow license enforcement works in GraphnAI, with read-only mode at expiry, feature flags, the identity cap, directory source limits and Prometheus alerts.
Operations
- Notifications and live updatesHow GraphnAI pushes live updates to your browser over server-sent events and raises notifications for Critical alerts, risk score jumps and Full-Auto events.
- Diagnostics and support bundlesChange the log level, search server and bridge logs, and download a support bundle from Admin > Diagnostics, without shell access to any host.
- Support accessLet GraphnAI Support run time-limited, read-only diagnostic queries with a support access key. Admins enable it, everyone sees it, and you can end it at once.
- Usage reportingEvery field in GraphnAI's usage report (usage telemetry), the firewall details, how to view today's report, and how to turn reporting off.