| Tab | What it controls | Who |
|---|---|---|
| Profile | Your name, avatar and contact details. | Everyone |
| Notifications | Which notification kinds reach you and how. | Everyone |
| Team & roles | Console accounts, roles and organization grants. | Everyone can view; admins edit |
| Organizations | Tenants, SLA targets, portal accounts and per-organization settings. | Admin |
| Data & privacy | Log retention per organization and GDPR data exports. | Admin |
| Agents | Enrolled agents: organization, fleet group, always-on flag, eviction. | Admin |
| Fleet | Installer bundles and enrolment tokens, fleet groups and their policy, release rollout. | Admin |
| AI | Model endpoints and a model per feature. | Admin |
| Suppressions | Suppressions across rules, with reasons, counters and expiry. | Everyone |
| Tags | The tag vocabulary for alerts and cases. | Admin |
| Case categories | Categories with write-up structure and task templates. | Admin |
| Report templates | Report structures and branding. | Admin |
| Personalization | Theme, contrast, density and text size. | Everyone |
| Integrations | Pull connectors, egress destinations and ingest keys. | Admin |
| Audit log | The audit trail. | Everyone |
| System | Health of ingest, detection, response, fleet and storage, and parser coverage. | Admin |
Settings reference
Every tab under Settings and what it controls.