---
title: Admin Setup
description: Configure your workspace, branding, permissions, and security
---

Workspace administrators can manage all settings from **Settings** in the sidebar.

## Branding

### Workspace name and logo

Go to **Settings > General** to set your workspace name, logo, and accent color. Your logo appears in the sidebar, email digests, and mobile apps.

| Setting | Description |
|---------|-------------|
| Workspace name | Displayed in the header and emails |
| Logo | SVG or PNG, at least 200x200px |
| Accent color | Applied to buttons, links, and highlights |
| Favicon | Shown in browser tabs |

### Custom domain

Map your docs and workspace to a custom domain like `news.yourcompany.com`.

<Steps>
  <Step title="Add the domain">
    Go to **Settings > Custom Domain** and enter your domain name.
  </Step>
  <Step title="Configure DNS">
    Add a CNAME record pointing to `custom.firmreader.com`.
  </Step>
  <Step title="Verify">
    Click **Verify** once DNS propagation is complete. SSL is provisioned automatically.
  </Step>
</Steps>

## Team management

### Roles

| Role | Permissions |
|------|------------|
| Owner | Full access, billing, workspace deletion |
| Admin | Manage members, channels, and settings |
| Editor | Create and publish posts to assigned channels |
| Member | Read posts, comment, and react |

### SSO configuration

Firmreader supports SAML 2.0 and OIDC for single sign-on. Go to **Settings > Authentication** to connect your identity provider.

Supported providers:
- Google Workspace
- Okta
- Azure Active Directory
- OneLogin
- Custom SAML 2.0

## Notification settings

Administrators can set organization-wide defaults for how notifications are delivered. Individual users can override these in their personal settings.

| Channel | Options |
|---------|---------|
| Push notifications | Immediate, batched hourly, or off |
| Email digest | Real-time, daily, weekly, or off |
| In-app | Always on |

### Priority overrides

Posts marked as **Urgent** always trigger an immediate push notification, regardless of user preferences. Use this sparingly for critical announcements.

## Security

### Data retention

Configure how long posts and analytics data are retained under **Settings > Security > Data Retention**.

| Setting | Default |
|---------|---------|
| Post retention | Indefinite |
| Analytics data | 12 months |
| Audit logs | 24 months |

### Audit log

Every action in the workspace is logged. View the audit log at **Settings > Security > Audit Log** to see who published, edited, or deleted content.

### IP allowlisting

Restrict workspace access to specific IP ranges under **Settings > Security > IP Allowlist**. Useful for organizations that require access only from corporate networks.