Administration
Administration is role-gated. Use least privilege: most application configuration requires settings.write, while Azure connections, connectors, users, audit, backup, and demo data have dedicated permissions.
Configuration
Security and access
Tool preference and references
Observability and maintenance
Every visible Settings entry is covered by one of these pages. Changes affect the current tenant/workspace unless a page explicitly describes an Azure connection or external destination.