> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://developers.alephant.io/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://developers.alephant.io/_mcp/server.

# Security

> Manage organization-level security policies for identity, sessions, access, and sensitive operations.

Security settings configure organization-level guardrails. Manage them together with single sign-on, user roles, tracing, and query history so security decisions can be verified.

## Management Boundary

| Area       | Guidance                                                                  |
| ---------- | ------------------------------------------------------------------------- |
| Identity   | Define login methods, session policy, and administrator scope.            |
| Access     | Use roles, groups, and sharing scopes to control resource visibility.     |
| Operations | Add approval or extra validation to high-impact actions, bots, and hooks. |
| Audit      | Retain security changes, denial events, and abnormal requests.            |

## Before Configuration

* Identify which accounts have administrator permissions.
* Confirm SSO, user sync, and local account policy are aligned.
* Evaluate security boundaries for bots, service accounts, and hooks separately.

## Verification

* Validate menu visibility with admin and regular users.
* Test unauthorized resources, tools, and configuration changes.
* Confirm denial events can be found in tracing or query history.