> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cedarai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

> A friendly guide to the Cedar Admin Portal for managing users, roles, and access.

<Info>
  The Admin Portal is where you control who can access Cedar and what they can do. It's designed for admins and operators who manage users, teams, and permissions.
</Info>

## What you can do

<CardGroup cols={2}>
  <Card title="Manage Users" icon="user-plus">
    Invite new users and manage existing accounts
  </Card>

  <Card title="Organize Teams" icon="users">
    Group users by team or responsibility
  </Card>

  <Card title="Define Roles" icon="key">
    Create sets of abilities (permissions)
  </Card>

  <Card title="Grant Access" icon="link">
    Connect groups to roles using bindings
  </Card>

  <Card title="Manage Organization" icon="building">
    Structure carriers into a hierarchy (optional)
  </Card>

  <Card title="Review Changes" icon="clock-rotate-left">
    Track all changes in the activity log
  </Card>

  <Card title="Automate Provisioning" icon="rotate">
    Configure SCIM for identity provider sync
  </Card>
</CardGroup>

## Where to sign in

<Tip>
  Use the production portal at **[https://admin.cedarai.com](https://admin.cedarai.com)**
</Tip>

## Portal navigation

The left sidebar organizes features by workflow:

<Tabs>
  <Tab title="Dashboard" icon="gauge-high">
    Quick overview of access coverage and recent activity
  </Tab>

  <Tab title="Organization" icon="building">
    Manage your organization hierarchy (optional — only visible if your account has an organization set up)
  </Tab>

  <Tab title="Permissions" icon="lock">
    **Bindings** — connect groups to roles\
    **Roles** — define what groups can do
  </Tab>

  <Tab title="User Management" icon="users">
    **Users** — individual accounts\
    **User Groups** — teams of users
  </Tab>

  <Tab title="Audit" icon="list-check">
    **Activity Log** — history of all changes
  </Tab>

  <Tab title="Advanced" icon="gear">
    **SCIM** — identity provider connections\
    **Tools** — organization settings
  </Tab>
</Tabs>

## Dashboard preview

<Frame caption="Admin Portal dashboard showing organization scope and access metrics">
  <img src="https://mintcdn.com/cedaraiinc/3XL8_nY45kQdoBAs/images/admin/dashboard-overview.png?fit=max&auto=format&n=3XL8_nY45kQdoBAs&q=85&s=bbd859bc6d92d45fb72ac96d70bf6a23" alt="Admin Portal dashboard overview" width="1440" height="900" data-path="images/admin/dashboard-overview.png" />
</Frame>

## Get started

<CardGroup cols={2}>
  <Card title="Getting Started" href="/user-docs/admin/getting-started" icon="rocket">
    Sign in, pick your carrier, and learn basic navigation
  </Card>

  <Card title="Organization" href="/user-docs/admin/organization" icon="building">
    Manage your organization hierarchy (optional)
  </Card>

  <Card title="Users" href="/user-docs/admin/users" icon="user">
    Find and manage the people who can sign in
  </Card>

  <Card title="User Groups" href="/user-docs/admin/user-groups" icon="users">
    Organize people by team or responsibility
  </Card>

  <Card title="Roles & Bindings" href="/user-docs/admin/roles" icon="key">
    Define what groups can do, and where
  </Card>

  <Card title="Bindings" href="/user-docs/admin/bindings" icon="link">
    Connect groups to roles and resources
  </Card>
</CardGroup>

## How it all fits together

The diagram below shows how Admin Portal concepts connect to grant access:

```mermaid theme={null}
flowchart TB
    subgraph Identity["🔐 Identity"]
        IDP([Identity Provider<br/>Azure AD / Okta]):::optional
        SCIM([SCIM Provisioning<br/>— optional]):::optional
        Users[Users]
        Groups[User Groups]
    end

    subgraph Access["🔑 Access Control"]
        Roles[Roles]
        Permissions[Permissions]
        Bindings[Bindings]
    end

    subgraph Resources["📦 Resources"]
        Org([Organization<br/>— optional]):::optional
        Carrier[Carrier]
        Customer[Customer]
    end

    subgraph Audit["📋 Audit"]
        ActivityLog[Activity Log]
    end

    IDP -.->|auto-sync| SCIM
    SCIM -.->|syncs| Users
    SCIM -.->|syncs| Groups
    Users -->|belong to| Groups
    Roles -->|contain| Permissions
    
    Groups --> Bindings
    Roles --> Bindings
    Bindings -->|grant access to| Org
    Bindings -->|grant access to| Carrier
    Bindings -->|grant access to| Customer
    
    Org -.->|contains| Carrier
    Carrier -->|contains| Customer

    Users -.->|tracked in| ActivityLog
    Groups -.->|tracked in| ActivityLog
    Bindings -.->|tracked in| ActivityLog

    classDef optional fill:#f9f9f9,stroke:#999,stroke-dasharray: 5 5
```

<Tip>
  **The key formula:** A **Binding** = **User Group** + **Role** + **Resource Scope**. This is how access is granted in Cedar.
</Tip>

## Learn the concepts

<Note>
  Want to understand **why** IAM works the way it does? These guides explain the conceptual foundation.
</Note>

<CardGroup cols={2}>
  <Card title="IAM Overview" href="/user-docs/iam/overview" icon="shield">
    How identity and access management works in Cedar
  </Card>

  <Card title="IAM Concepts" href="/user-docs/iam/concepts" icon="list-tree">
    Deep dive into users, groups, roles, and permissions
  </Card>

  <Card title="Policies & Roles" href="/user-docs/iam/policies-and-roles" icon="scroll">
    How policies bind members to roles on resources
  </Card>

  <Card title="Glossary" href="/user-docs/admin/glossary" icon="book">
    Quick reference for all terms
  </Card>
</CardGroup>