For admins
Where to look for each admin task, by surface.
Day-to-day administration is split across four surfaces. Pick the one that owns what you want to change.
| Want to… | Use… |
|---|---|
| Change app features, allowed file types, providers, branding | Admin panel → Configuration |
| Give someone a role, or add people to a group | Admin panel → Access (Members) |
| Define roles and groups | Admin panel → Roles and groups |
| Choose which capabilities a role holds | Admin panel → Grants |
| Apply a per-role or per-group override (e.g. raise the file size cap) | Admin panel → Scoped overrides |
| Register a new AI model, set budgets, set rate limits | Gateway admin |
| Read a single user's conversation, debug a bad reply | Trace viewer |
| Watch error rate, latency, request rate, host health | Dashboards |
The admin role
The first user registered on a fresh NUFI install gets the ADMIN
role automatically. Every later user defaults to USER. The
Roles and groups page covers how to
elevate later users to admin.
Admin status applies separately to each surface:
- Admin panel — uses your NUFI sign-in. Only
ADMIN-role accounts can sign in. - Gateway admin — has its own master key. Set during install.
- Trace viewer — has its own user model. The first user on a fresh install becomes the org owner.
- Dashboards — has its own user model. Initial credentials are set during install.
Yes, four separate sign-ins. Each system is independent so a compromise of one does not cascade. The chat sign-in is the canonical user identity; the others are operational tools you only open when you need them.