> ## Documentation Index
> Fetch the complete documentation index at: https://symphony-docs.fcamara.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Master Profile - Platform

> Manage the platform as a whole: companies, permissions, global announcements and cache, user migration, and agent cloning.

<Warning>
  **Exclusive access to the Master profile.** Regular administrators and users do not see these features.
</Warning>

## What it is

The **Master** profile manages the **platform as a whole**, above the level of a single company. Compared to a regular administrator, the Master has four additional resources:

1. **Platform section** in the Admin Panel — register/configure **Companies**, define **Permissions**, publish **Global announcements**, and manage the **Global cache**.
2. **Switch company** — choose, via the **sidebar**, which company they are currently viewing/operating.
3. **Migrate user between companies** — on the **Users** page.
4. **Clone agent between companies** — on the **Agents** page.

## How to access

* **Platform:** user menu → **Admin Panel** → **Platform** section (visible only to Master), with **Companies**, **Permissions**, **Global announcements**, and **Global cache**.
* **Switch company:** in the **sidebar** (user menu), **Switch company** option.
* **Migrate user** and **clone agent** between companies: actions available within the **Users** and **Agents** pages themselves.

## Switch company (set the focus company)

Since the Master acts across multiple companies, they need to indicate **which company** they want to work on. This is done via the **Switch company** option in the **sidebar** (clicking your name/avatar).

<Steps>
  <Step title="Open the user menu and click Switch company" />

  <Step title="Select the desired company" />

  <Step title="Confirm the focus company">
    From then on, Symphony reflects **the focus company**. The selected company name appears as a reference in the menu itself.
  </Step>
</Steps>

<Warning>
  Always check **which company is in focus** before creating users or changing settings, to avoid applying changes to the wrong tenant.
</Warning>

## Companies — registration and management

Registration, editing, and activation/deactivation of companies are in **Platform → Companies**. Each company has its own **access domain**, **license** limit, and **authentication (SSO)** provider. It's from registering a company that new clients get their own address and users in Symphony.

The **Companies** page shows the list of registered companies, with a **search** field (by name or domain) and a **New company** button.

### Create a company

<Steps>
  <Step title="Click New company" />

  <Step title="Fill in the General, License, and SSO/AD tabs">
    See the fields for each tab below.
  </Step>

  <Step title="Click Create company" />
</Steps>

<Tabs>
  <Tab title="General">
    | Field            | Required | Description                                                                                                                                       |
    | ---------------- | :------: | ------------------------------------------------------------------------------------------------------------------------------------------------- |
    | **Company name** |    Yes   | Display name of the company. Must be between **3 and 60 characters**.                                                                             |
    | **Domain**       |    Yes   | Unique access identifier. Only **lowercase letters, numbers, and hyphens** accepted. Defines the access address: `symphony.fcamara.com/<domain>`. |

    Below the **Domain** field, the screen shows a preview of the final address users will use to access the company.
  </Tab>

  <Tab title="License">
    | Field                        | Description                                                                                                      |
    | ---------------------------- | ---------------------------------------------------------------------------------------------------------------- |
    | **Maximum licenses (users)** | Maximum number of active users allowed. **Leave blank for no limit** (company without user cap).                 |
    | **Custom limit message**     | Text displayed to users when the license limit is reached. **Supports HTML formatting** and shows a **preview**. |
  </Tab>

  <Tab title="SSO / AD">
    Choose the company's **authentication provider**:

    * **Standard login** — users log in with **email and password**; no external provider needed.
    * **Microsoft AD** — requires: **Directory (Tenant) ID**, **Application (Client) ID**, **Client secret**, and **Redirect URI**.
    * **Google Workspace** — requires: **Client ID**, **Client secret**, **Hosted domain (hd)** (restricts login to the specified domain), and **Redirect URI**.

    <Note>
      SSO data (IDs, secrets, and URIs) are obtained from the respective provider's portal (Azure Portal or Google Cloud Console). The screen itself provides tips on where to find each value.
    </Note>
  </Tab>
</Tabs>

### Edit a company

In the list, use the **edit** action for the desired company. The same window (General, License, SSO/AD) opens with current data. When done, click **Save changes**.

### Activate / Deactivate a company

Each company can be **activated** or **deactivated** from the list. When deactivating, a confirmation is shown:

* **Deactivate:** all company users **immediately lose access**. The action is **reversible** — just reactivate the company.
* **Activate:** users **immediately regain access**.

<Warning>
  **There must always be at least one active company.** When trying to deactivate the last active company, the system blocks the action with a warning.
</Warning>

## Permissions

The **Permissions** page defines, **per company**, what each **profile** (Administrator and User) can do. Permissions are organized into three major groups (with toggles for each item):

* **Chat** — file uploads, message editing/deletion, voice (STT/TTS), multiple models, code interpretation, web search, image generation, archived conversations, attach knowledge/prompt/tool, temporary chat, etc.
* **Workspace** — access to Agents, Knowledge, Prompts, and Tools.
* **Admin panel** — access to management and settings sections.

<Note>
  These permissions determine **which features and screens** each user sees in Symphony.
</Note>

## Global announcements

Lets you publish **notices/banners** that appear to users **across all companies, regardless of tenant** (e.g., maintenance notices or platform news). This is what differentiates a **global** announcement from a specific company's banners: the global one reaches all platform users at once.

Each announcement lets you define **type**, **display period**, and the **option to dismiss** by the user.

## Global cache

Platform **cache** management tool, used for maintenance and data updates at a global scale.

## Migrate user between companies

On the **Users** page (Admin Panel → Management → Users), the Master can **move a user from one company to another**. The action is available on the user's row (migration icon) and only appears when **another active company exists** to migrate to.

<Steps>
  <Step title="Locate the user in the list" />

  <Step title="Click the migrate to company action" />

  <Step title="Choose the destination company and confirm" />
</Steps>

## Clone agent between companies

On the **Agents** page (sidebar → Agents), the Master can **clone an agent to another company**, reusing a ready-made configuration in another tenant. The **Clone to company** option is in the agent's action menu and only appears for the Master when **another active company exists** as a destination.

<Steps>
  <Step title="In the agent's action menu, choose Clone to company" />

  <Step title="Select the destination company and confirm" />

  <Step title="A copy of the agent is created in the chosen company" />
</Steps>

## Best practices

* Choose a **short, clear, and stable domain** — it's part of the access address and shouldn't change frequently.
* Set the **maximum licenses** according to the company's contract/plan; leave blank only if the company can be **unlimited**.
* Configure **SSO** whenever the company uses Microsoft or Google — improves security and login experience.
* Before **deactivating** a company, notify users, as access is cut immediately.
* Adjust **permissions** carefully: they directly affect the experience of all company users.
* Use **global announcements** to communicate maintenance and news in advance.
* Before creating users or changing settings, **check the focus company** (Switch company option) to avoid acting on the wrong tenant.

## Frequently asked questions

<AccordionGroup>
  <Accordion title="What's the difference between Master and Administrator?">
    The **Administrator** manages **one** company. The **Master** manages the **platform** and **all** companies, including company registration, permissions, and global resources.
  </Accordion>

  <Accordion title="Does the domain accept uppercase or spaces?">
    No. Only **lowercase letters, numbers, and hyphens**.
  </Accordion>

  <Accordion title="Can I leave the license limit blank?">
    Yes. Left blank, the company has **no user limit**.
  </Accordion>

  <Accordion title="Does deactivating a company erase data?">
    No. Deactivation only **blocks user access** and is **reversible** by reactivation.
  </Accordion>

  <Accordion title="Where do users access the created company?">
    At `symphony.fcamara.com/<domain>` (the preview appears when you type the domain).
  </Accordion>

  <Accordion title="I configured SSO but login doesn't work.">
    Review the data (IDs, secret, and Redirect URI) in the provider portal (Azure/Google) and confirm that the **redirect URI** registered there is identical to the one entered here.
  </Accordion>

  <Accordion title="I changed a permission but the user still doesn't see the change.">
    Permissions apply per company and profile; ask the user to reload the session (Ctrl/⌘ + Shift + R). Also confirm if the feature depends on additional technical configuration (e.g., image/audio provider).
  </Accordion>
</AccordionGroup>

## Known limitations

* All features in this section are **exclusive to the Master profile**.
* The company **name** must be between 3 and 60 characters; the **domain** only accepts lowercase letters, numbers, and hyphens.
* **At least one company** must remain active — it's not possible to deactivate all.
* **SSO** operation depends on valid credentials configured in the external provider (Microsoft/Google).
* **Permission** changes immediately impact what users in that company can access.