Workbench Admin πŸ›‘οΈ full access

Complete control over the Workbench installation β€” manage users, configure AI providers, register visualization types, and set global system policies.

What Is a Workbench Admin?

A Workbench Admin has unrestricted access to every feature in the Workbench. They can manage all users across all groups, configure which AI providers and models are available, register visualization types, set system-wide policies (demo mode, email, password rules), and control everything a Group Admin can do β€” but without any group-scoping restrictions.

Workbench Admins can log in without email verification. While regular users and Group Admins must verify their email before logging in, Workbench Admins bypass this check. This ensures administrators can always access the system even if email delivery is misconfigured.

Admin Dashboard β€” User Management

The main Admin Panel (/admin) is your central hub for user management. Here's everything you can do:

πŸ‘₯ View All Users

See every registered user across all groups. The user list shows email, name, admin status, verification status, BCC registration preference, creation date, and soft-delete status.

⭐ Manage Admin Status

Toggle isAdmin to promote a user to Workbench Admin or demote an existing admin back to a regular user. This is a system-wide privilege β€” use it carefully.

βœ… Verify Emails

Manually verify any user's email address. Useful when a verification email didn't arrive or was blocked by a spam filter. Verified users can log in without the verification gate.

πŸ—‘οΈ Soft & Hard Delete

Soft-delete temporarily disables a user account (recoverable via Restore). Hard-delete permanently removes the user and all associated data from the database. Only Workbench Admins can perform hard deletes.

πŸ“§ BCC Registrations

Toggle whether a user receives BCC (blind carbon copy) notification emails when new users register. Useful for keeping administrators informed of signup activity.

πŸ”„ Restore Users

Restore a previously soft-deleted user. The user's account and all their data (datasets, connections, recipes) are recovered intact.

Admin β€” AI Providers & Models

πŸ”Œ Manage AI Providers

Define which AI providers are available to all users. Register new providers (Ollama, OpenAI, Anthropic, etc.) with their API endpoints and configuration. Provider definitions are system-wide β€” users then create their own connections using these providers.

  • Add new AI provider definitions
  • Edit provider endpoints and metadata
  • Remove providers that are no longer supported

πŸ€– Manage Provider Models

Register specific AI models under each provider. Each model entry includes the model identifier, capabilities, and configuration. Users see these models when creating AI connections and selecting which model to chat with.

  • Register new models under existing providers
  • Update model identifiers and capabilities
  • Remove deprecated models

Admin β€” Visualization Types

πŸ“Š Visualization Type Registry

Register the visualization types that users can create. Each type defines:

When users go to the Visualize page, they choose from the types you've registered here. Adding a new visualization type makes it immediately available to all users.

Admin β€” Groups

πŸ‘₯ User Group Management

Create, edit, and manage user groups. Every user belongs to a group, and Group Admins can only manage users within their own group. As a Workbench Admin, you can:

Groups enable collaborative research: datasets, database connections, AI connections, and recipes can be shared within a group so all members can access the same resources.

Global Settings

🎭 Demo Mode

Toggle the Workbench between production and demonstration mode. When demo mode is active, a banner and floating indicator appear on every page. This setting is primarily used when running a public-facing demo instance of the Workbench.

πŸ“§ Email Configuration

Configure the SMTP server the Workbench uses to send emails β€” verification messages, password reset links, and registration notifications.

  • SMTP host, port, and security settings
  • Authentication username and password
  • From address for outgoing emails

πŸ” Password Policy

Set password requirements that apply to all user accounts:

  • Minimum password length
  • Require uppercase letters
  • Require digits
  • Require special characters
  • Maximum password age (force periodic resets)
⚠️ Use with care: Workbench Admin actions have system-wide impact. Hard-deleting a user permanently removes all their data. Changing global settings affects every user on the system. There is no "undo" for these actions beyond restoring from a database backup.

Virtual Datasets & Recipe Management

Workbench Admins can create and manage virtual datasets across all users. Recipe executions can be viewed and cancelled from the admin panel. The isShared flag on any resource can be toggled by admins, overriding group restrictions.

Complete Capability Summary

CapabilityRegular UserGroup AdminWorkbench AdminExample User
Use all app features (chat, datasets, etc.)YesYesYesYes
Login without email verificationRequiredRequiredBypassRequired
View admin pagesNoGroups onlyFull accessRead-only
View all usersSelf onlyOwn groupAll usersSelf only
Edit/update usersNoOwn groupAll usersNo
Verify emailsNoOwn groupAll usersNo
Soft-delete usersNoOwn groupAll usersNo
Hard-delete usersNoNoYesNo
Restore deleted usersNoOwn groupAll usersNo
Promote/demote Workbench AdminsNoNoYesNo
Promote/demote Group AdminsNoOwn groupAny groupNo
Manage AI Providers & ModelsNoNoYesView only
Manage Visualization TypesNoNoYesNo
Manage all groupsNoOwn groupAll groupsNo
Change global settingsNoNoYesNo
Toggle demo modeNoNoYesNo
Manage UsersNoOwn groupAll usersNo
Manage AI ProvidersNoNoYesView only
Manage Global SettingsNoNoYesNo
Access Admin PagesNoGroups onlyFull accessRead-only
Manage GroupsNoOwn groupAll groupsNo
Share Resources (isShared)NoOwn groupAll resourcesNo
Create/Execute RecipesYesYesYesView only
Manage Virtual DatasetsNoNoYesView only
Virtual DatasetsYesYesYesView only
Cancel Running RecipesYesYesYesNo
isShared ToggleYesYesYesNo