The Admin Console is the centralized management interface for configuring, monitoring, and managing AI for Work. Administrators use it to control workspaces, users, agents, LLM settings, security, and audit logs.
Only users with the Admin role and required authorization can access the Admin Console.
Access the Admin Console
-
Log in to AI for Work.
-
Click Admin Console from your user account menu.
-
The system redirects to the Workspace page.
Account Hub
The Account Hub is the central control panel for all administrative tasks — user management, workspace oversight, AI configuration, security, and reporting.
| Section | What You Can Do |
|---|
| Account Analytics | View organization-wide performance metrics filtered by workspace; monitor token usage and user engagement. |
| Workspace Management | Oversee all workspaces — names, members, agent inventories, activity timestamps; create new workspaces. |
| User Management | Create and deactivate user accounts; assign roles and manage access permissions. |
| LLM Configuration | Define language model settings that power AI assistants across the environment. |
| Assistant Configurations | Set global AI assistant behaviors consistent with organizational policies. |
| Security | Configure authentication, security policies, and data protection settings. |
| Audit Log | Review logs of all user actions, configuration changes, and system events for compliance. |
Workspaces
A workspace is a dedicated, isolated environment where teams collaborate on AI initiatives. Each workspace enforces secure boundaries, role-based access, and agent governance.
AI for Work supports two workspace types:
- Account Workspaces — admin-managed team environments for building and deploying shared agents.
- Personal Workspaces — user-owned environments for building and sharing individual agents, governed by admin-configured permissions.
Account Workspaces
Account workspaces are created and managed exclusively by administrators. They provide structured environments for teams to create, manage, and publish agents.
Key capabilities:
| Capability | Details |
|---|
| Role-based access | Owner (full control) and Agent Manager (agent oversight only) |
| Publishing controls | Publish agents to workspace users, all account members, or specific user groups |
| Agent type permissions | Configurable per workspace; defaults to all agent types |
| Governance | Admin-only workspace creation and deletion; full audit trails |
Create a Workspace
Only administrators can create workspaces.
-
Go to Account Workspace in the Account Hub.
-
Provide the following details:
| Field | Description |
|---|
| Name | A unique identifier for the workspace |
| Description | A summary of the workspace’s purpose |
| Workspace Collaborators | Active users to add; they receive an invitation email automatically |
| Agent Publish Settings | Who agents are published to — workspace users, all account members, or selected user groups |
| Allowed Agent/Apps | Agent types permitted in this workspace (defaults to all types) |
-
Assign collaborator roles:
| Role | Permissions |
|---|
| Owner | Add or remove users; manage workspace metadata; leave workspace |
| Agent Manager | Manage and configure agents; cannot manage users; can leave workspace |
Agent Publish Settings directly affect the permissions required to deploy and publish an agent.
Delete a Workspace
Only administrators can delete workspaces. Deletion is permanent and removes all associated agents, configurations, and resources.
-
Go to Workspace Management in the Account Hub.
-
Select the workspace to open its Settings page.
-
Scroll to the bottom and click Delete Workspace.
-
Click Update to confirm.
Workspace Modules
All account workspaces include:
| Module | Description |
|---|
| Workspace Analytics & Dashboard | Performance metrics, usage data, and activity logs |
| AI Agents | Advanced information retrieval across knowledge sources |
| RAG Agent | Retrieval-Augmented Generation connected to organizational knowledge bases |
| API Agents | Integration with external systems and applications |
Default Workspace
The default workspace is pre-configured and immediately available upon account setup.
- Includes a default RAG configuration with universal publishing.
- Comes with a pre-configured enterprise knowledge base.
- Includes a business solution suite (HR, IT, Recruitment) — ready to use or customize.
- Has fixed elements and restricted administrative access settings.
Personal Workspaces
Personal workspaces let end users create, manage, and publish custom agents in their own dedicated environment. Administrators retain full oversight through centralized management tools, usage analytics, and granular permission controls.
Key benefits:
- Users can build custom agents for their specific workflow needs.
- Administrators can view and manage all personal workspaces and agents from a single interface.
- Agents can be shared with other account members based on admin-configured settings.
Settings
Administrators configure personal workspace behavior from the Account Hub.
| Setting | Options | Description |
|---|
| Allow agent creation | Enabled / Disabled | Controls whether users can create agents in personal workspaces |
| Access scope | Everyone in the account / Selected users / Excluded users | Determines who has access to personal workspaces |
| Allow publishing to others | Enabled / Disabled | Controls whether users can share agents with other account members |
| Publishing limit | No limit / 5 / 10 / 20 / 30 users | Maximum number of users an agent can be published to |
| Allowed agent types | Selectable per type | Restricts which agent types users can create |
Available agent types:
- Search Agent
- API Agent
- Prompt Agent
- Autonomous Agent
- Agentic Flow
- Bot Agent
- Workflow Agent
Collaboration and Sharing
Users can publish agents to collaborators up to their permitted limit.
| Access Level | Description |
|---|
| Editor | Full configuration editing capabilities |
| Viewer | Read-only agent interaction (default for newly added collaborators) |
| No Access | Agent is visible but cannot be used |
- Publishers receive a confirmation notification when collaborator access is assigned.
- Shared agents appear under the Shared Agents section in the workspace switcher.
Administrative Views
Administrators can monitor and manage all personal workspaces from the Account Hub.
| View | Description |
|---|
| Workspace View | Lists all personal workspaces; admins can disable agents and view metrics. |
| Agent View | Consolidated list of all agents across personal workspaces; filter by creator, agent type, or sort order. |
- Agent Details — Detailed metrics and performance data
- Agent Usage Logs — Usage analytics and activity history
These features apply across both account workspaces and personal workspaces.
Dashboard and Logs
| Feature | Details |
|---|
| Dashboard Widgets | Insights on user-created agents; filter by all or selected personal workspaces |
| Metadata Logging | Records timestamps, user actions, and agent usage |
| Audit Trail | Comprehensive activity history for compliance and governance |
