Sections
Applications
The Access Manager applications that authenticate external systems. Create them, view their details, and delete them.
Partners
Your own customers that call your platform from their own systems. Create them, choose what each one can reach, and create their applications.
Authorization
Users, roles, groups, and permissions, in an area with its own sidebar.
Security
Your own multi-factor authentication, plus the single sign-on providers and the IP allowlist when your permissions include them.
Products
Turn Lerian products on or off for your tenant.
System
System preferences, such as the interface language and the theme.
Notification Layer
Notification delivery by email, SMS, and webhook, in an area with its own sidebar.
What each section needs
Applications, Partners, Authorization, and Security need Access Manager. The Partners entry disappears when
NEXT_PUBLIC_PARTNERS_ENABLED is false. When your account lacks the read permission on applications, the Console hides the Applications entry in the Settings sidebar. It does not show an error. Without the read permission on users, it also hides the Authorization entry.
Security always appears, and Settings opens on it. Its MFA and Passkey tabs are open to every signed-in user. In the Passkey tab, the environment passkey policy switch needs the update permission on application providers. The Single Sign-On tab needs the read permission on providers. The IP allowlist tab needs the read permission on security. Products and System open without Access Manager and without a permission. With Access Manager, the Notification Layer entry needs the read permission on notifications.
Where users live
User, role, group, and permission management lives in a separate area called Authorization, with its own sidebar. Open it from the Authorization entry in the Settings sidebar, or from the gear menu in the top bar.
Managing users
Create, edit, and delete user accounts, reset passwords, and read how groups, roles, and permissions give a user access.