Role hierarchy
From lowest to highest:
A Blocked user can sign in but sees no content.
Scoped roles
In addition to the main role level, admins can assign domain-based roles that give focused permissions:
Special roles: IT Admin (users and security), Buyer (budget and purchasing), Translator (content translation).
There are more areas than the four above, including Content, Engagement, Events, and Channels. Permissions lists all of them and shows who has what.
Security settings
Access security configuration at Admin → Security (/admin/security):
SSO configuration
- Configure SAML/SSO integrations (Okta, Azure AD, Google, etc.)
- Set up identity provider connections
- Test SSO flow
Users sync
- Sync users from SSO providers
- Schedule automatic sync intervals
- View sync logs
Audit logs
The Audit Logs tab is a record of selected changes made in your organization, newest first. Examples include assigning learning, creating or changing groups, updating channels, handling learning requests, changing providers, and changing which sidebar items people see. It isn’t a record of every click. Each row has these columns:- Filter — use the filter in the User or Date column header to find one person’s changes or a time window.
- Export — select Export to download the list as a CSV file.
Developer settings
- Generate personal access tokens
- Manage and revoke MCP access tokens
Outbound webhooks aren’t set up here. Use the Send an HTTP request action in Automations. Admins can create it by default.