Settings
The Settings page is where you configure how Tenaxis behaves for your organization. Go to Settings in the bottom of the left sidebar to access all options.
Account
Workspace Information
| Field | Description |
|---|---|
| Signed In As | Your Microsoft 365 UPN (email address) - cannot be changed here |
| Tenant ID | Your Microsoft 365 tenant identifier - shown for reference |
| Notification Email | The email address where admin alert emails are sent - you can change this to route alerts to a team mailbox |
File Search
| Setting | Default | Description |
|---|---|---|
| Enable File Search | Off | When turned on, admins can search for documents across all managed sites using Microsoft 365 Search. End users can also search for files within sites they have access to through the portal. |
Note: File search uses the Microsoft 365 Search API and requires appropriate Microsoft 365 licenses. The search region may affect what results are returned based on data residency requirements.
Enhanced SharePoint Features
| Setting | Default | Description |
|---|---|---|
| Enable Enhanced SharePoint Features | Off | Grants Tenaxis the SharePoint Sites.FullControl.All application permission, held on a dedicated "Enhanced Features" app registration that is separate from the app you sign in with. Required for named document libraries, library access control, library views, navigation control, versioning, regional settings, and content types in templates. Also enables on-demand navigation and regional settings management per site from the site detail page (SharePoint tab). |
To enable: Click Enable Enhanced SharePoint Features and approve the permission in Microsoft's admin consent screen. It activates immediately — you do not need to sign in again. The permission is only requested when you click this; it never appears during normal sign-in.
What this grants, in plain terms: while enabled, Tenaxis can manage SharePoint site settings across your tenant using an app-only (background) credential — independent of any signed-in user. It is strictly opt-in, isolated on a separate app registration from the one used at sign-in, and you can revoke it at any time.
To disable: Click Disable. Templates with Enhanced configuration fields stop applying those settings; only the Basic folder structure is applied (folders in each site's default Documents library). To fully remove the permission, also revoke Tenaxis's Enhanced Features app in Azure AD Enterprise Applications.
Upgrading existing sites: When you enable Enhanced Features after sites have already been provisioned, those sites show an amber "Upgrade to Enhanced Features" banner on their detail page. Use this to re-apply the template in enhanced mode — existing Documents folders are never deleted. See Templates for details.
Lifecycle Management
Controls how Tenaxis handles inactive (stale) sites. See Lifecycle Management for the full explanation.
| Setting | Default | Description |
|---|---|---|
| Enable Lifecycle Management | On | Turns the entire lifecycle system on or off. When off, no sites will be flagged as stale. |
| Inactivity Threshold (days) | 90 | How many consecutive days without activity before a site is flagged and the owner notified. |
| Renewal Window (days) | 14 | How many days the site owner has to click the renewal link before the site is escalated to admin. |
Recommendation: Keep the default settings (90 days inactive, 14 days window). Only reduce the inactivity threshold if your organization has a policy requiring more frequent review (e.g., 30 or 60 days).
Alerts
Controls what events trigger notifications and emails to admins.
| Setting | Default | Description |
|---|---|---|
| Risk Score Threshold | 70 | Sites that score above this number will trigger a risk.high event and alert. Set to 0 to disable risk alerts entirely. |
| External User Alerts | On | Notify admins when an external/guest user is added to any site. |
| Stale Sync Alert (days) | 7 | Alert when a site's membership data hasn't been synced from Microsoft 365 for this many days. Set to 0 to disable. |
| Weekly Digest | Off | Send admins a weekly email every Monday summarizing all sites above the risk threshold. |
Guidance on Risk Threshold:
- 60–70 - Good balance; catches most concerning sites without too many false alerts
- Below 50 - More sensitive; you'll see alerts for sites that have any external users or sharing enabled
- Above 80 - Less sensitive; only the most severely misconfigured sites will alert
- 0 - Disables risk alerts entirely
Naming Policy
A naming policy defines rules that site names must follow. When configured, Tenaxis will enforce these rules whenever a new site is provisioned.
| Setting | Description |
|---|---|
| Required Prefixes | Site names must start with one of these strings (e.g., IT-, HR-, PROJ-). If multiple are listed, the name must match at least one. |
| Required Suffixes | Site names must end with one of these strings (e.g., -2026, -Internal). |
| Blocked Words | Site names must not contain any of these words (e.g., test, temp, delete). Case-insensitive. |
Example configuration:
- Prefixes:
IT-,HR-,MKTG-,FIN-,OPS- - Suffixes: (none)
- Blocked words:
test,temp,draft,delete,old
With this, a site named test-project would be rejected, but IT-project-management would be accepted.
To set up a naming policy:
- Click Edit next to Naming Policy
- Add prefixes, suffixes, or blocked words using the input fields
- Click Save
To remove a prefix/suffix/word, click the X next to it.
Access Reviews
Controls the periodic access review cycle. See Access Reviews for the full explanation.
| Setting | Default | Description |
|---|---|---|
| Enable Access Reviews | Off | Turns the access review system on or off. |
| Frequency | Quarterly | How often reviews are triggered: Monthly, Quarterly, or Annually. |
| Review Due (days) | 14 | How many days site owners have to complete each review before it expires. |
| Require OTP | On | Whether owners must verify their identity with a one-time email code before they can submit a review. Recommended for compliance. |
Frequency Guidance:
- Monthly - High-security environments; lots of admin overhead; best for highly sensitive sites
- Quarterly - Most organizations; balances thoroughness with practicality
- Annually - Low-activity environments; minimal overhead but less oversight
Offboarding
Controls automatic handling of disabled employee accounts. See Offboarding for the full explanation.
| Setting | Default | Description |
|---|---|---|
| Auto-Remove Disabled Accounts | Off | When enabled, the nightly scan automatically removes users with disabled Entra ID accounts from all site memberships. Sole owners of sites are excluded and flagged for manual review. |
Recommendation: Enable this for most organizations. The safety guard (not auto-removing sole owners) prevents orphaned sites.
Webhooks
Manage webhook registrations for integrating Tenaxis events with external systems. See Webhooks for the full explanation.
From this section you can:
- View all registered webhooks and their status
- Add a new webhook (URL + events to subscribe)
- Edit an existing webhook
- Test a webhook by sending a sample payload
- View delivery logs to check if deliveries are succeeding
- Delete a webhook
Saving Changes
Each section of Settings has its own Save button. Changes are saved per-section - you don't need to save the entire settings page at once. Each save is logged in the audit trail.
Settings and Plan Limits
Some settings are constrained by your plan:
| Feature | Starter | Pro | Enterprise |
|---|---|---|---|
| Admin Seats | 1 | 5 | Unlimited |
| Sites per day | 2 | 15 | Unlimited |
| All governance features | ✓ | ✓ | ✓ |
Attempting to add more admins than your plan allows will prompt you to upgrade. See Billing & Plans.