Admin Settings → General sets the platform-wide defaults that every user inherits. Configure it first; most other sections reference these choices.
Appearance
| Option | Effect |
|---|---|
| Workspace colour preset | The accent theme for the whole workspace (for example, a preset matching your brand tone). |
| Default typography | The typeface used across the interface. |
| Banner / announcement text | A message shown to users — ideal for maintenance notices and policy reminders. |
| Instance name | The name shown in the interface and page titles. |
Users can still pick their own light/dark theme in personal settings; these options define the workspace identity.
Sign-up and access
| Option | Notes |
|---|---|
| Allow users to create new accounts through the sign-up page | On in open environments; off where accounts are provisioned only by administrators or your identity provider. |
| Default role assigned to newly created users | The permission level new accounts receive. Keep it minimal; promote deliberately. |
| Sign-up approval text | Instructions shown during registration (for example, "your request will be reviewed"). |
| First-use admin claim | On a fresh installation, the first account to sign up becomes the administrator — configure sign-up before publishing the URL. |
| Session expiration | How long a login stays valid before re-authentication is required. Match your security policy. |
Authentication directory
IntraLLM can authenticate users against your corporate directory so people use the credentials they already have:
| Field | Purpose |
|---|---|
| Connection URL / server | Your directory service address. |
| Port | Standard directory port (secure port when encryption is enabled). |
| Application DN and password | The service account used to look users up. |
| Attribute for Username / Attribute for Mail | Directory attributes that identify a user and their email. |
| Base DN / search scope | Where in the directory to search. |
| Certificate path and checking | Trust settings for encrypted connections; certificate verification can be enabled or disabled. |
| Ciphers | Advanced transport-security tuning where required. |
| Group membership attribute | Lets directory groups drive permissions. |
Test before enforcing:
Validate directory settings with a test account before disabling local sign-up. Misconfigured directory access can lock everyone out — keep one working administrator account as a break-glass path, and know the Reset Admin Password recovery procedure.
Personal API keys
| Option | Effect |
|---|---|
| Allow users to generate and use personal API keys | Lets individuals create keys for their own integrations. See Account & Security. |
| Allowed Endpoints | A comma-separated list of endpoints those keys may call — restrict this to what users legitimately need. |
Disable personal keys entirely if all integrations must be centrally controlled.
Channels and community
| Option | Effect |
|---|---|
| Channels enabled / disabled | Shared channel spaces within the workspace. Disable if collaboration happens in your existing tools. |
| Admin details visible / hidden | Whether administrators' details are shown in shared spaces. |
| Allow users to share conversations with the community space | External/community sharing. In restricted environments this is normally off; leaving it off also guarantees no conversation content leaves your deployment. |
Save behaviour
Settings in this section apply when saved and take effect for users on their next interaction. Announce visible changes (banners, theme, new sign-up rules) to your user base.