CMDash Admin Guide
Audience: Workspace Owners and Administrators
This guide is now an index. Each topic below has its own page under
docs/user/admin/, refreshed against the current app (the
settings rework, CMMC Levels 1–3, the nav rework, program templates,
and everything shipped since this file was last a single monolithic
document).
| Topic | Page |
|---|---|
| Inviting users, roles, custom roles | Users & Roles |
| Password policy, MFA, passkeys, sessions | Authentication |
SSO/SAML [Starter], SCIM/LDAP [Enterprise] | SSO, SCIM & LDAP |
| Connecting third-party tools | Integrations Management |
| Slack/Teams/Email channels, alert rules | Notifications & Alerts |
Logo and color white-labeling [Command+] | Branding |
Multi-BU hierarchy [Enterprise] | Business Units |
Read-only API access [Starter], writes/webhooks [Enterprise] | API Keys & Webhooks |
| Plan, subscription, enterprise contracts | Billing |
| Data retention windows, export, erasure | Retention & Export |
| Restoring an export into a workspace | Organization restore |
| Checking for and applying updates | Self-Update |
| Hosted vs. self-hosted topology | Deployment Models |
Who should read this guide:
- Owners — full access to every setting, including billing.
- Admins — day-to-day platform administration; most settings pages are now Owner-or-Admin, not Owner-only (verify per page above — billing, for example, changed from Owner-only to Owner-or-Admin).
If a page above is marked [Enterprise], it requires that subscription tier. If a page's tier ever looks wrong, the plan comparison on the pricing page is authoritative: the product enforces the tier, not this guide.
Onboarding checklist
Use this when setting up a new workspace:
- Complete the onboarding wizard (company info, industry, primary framework).
- Invite your team — see Users & Roles.
- Connect at least one integration — see Integrations Management.
- Set up notification channels and alert rules — see Notifications & Alerts.
- Review compliance frameworks in scope for your org.
- Starter and above: configure SSO with your identity provider — see SSO, SCIM & LDAP. Enterprise workspaces: also set up SCIM/LDAP directory sync and Business Units if you manage subsidiaries or client accounts — see SSO, SCIM & LDAP and Business Units.
- Review your password policy and MFA enforcement — see Authentication.
The sections below are kept only so old links (including the in-app help panel's "Full documentation" links) still land somewhere useful. Each one points to the page above that replaced it.
2. User Management
Moved to Users & Roles.
Role Assignment
Moved to Users & Roles.
4. SSO / SAML Configuration [Starter]
Moved to SSO, SCIM & LDAP.
5. LDAP Directory Sync [Enterprise]
Moved to SSO, SCIM & LDAP.
Multi-Factor Authentication (MFA)
Moved to Authentication.
8. Notification Channels
Moved to Notifications & Alerts.
9. Alert Rules
Moved to Notifications & Alerts.
11. Multi-Business Unit Hierarchy [Enterprise]
Moved to Business Units.
12. API Keys & Webhooks [Starter: read-only API · Enterprise: writes & webhooks]
Moved to API Keys & Webhooks.
13. Billing & Subscription
Moved to Billing.
14. Data Retention & Deletion
Moved to Retention & Export.
For questions not covered in this guide, contact CMDash support at support@cmdash.com or visit the documentation at https://www.cmdash.com/docs.