Environment Settings

An Environment offers IT Admins a way to manage Identities, Policies, and Applications at various levels during the development of their Policies (or for other reasons). When you access the Environment Settings screen, by default, the Details tab is displayed. In addition, you will see the Edit button and the Delete Environment button.

In addition to the Details tab, other tabs include:

• Permissions
• Scopes
• API Authorizers
• Data Authorizers

To access the Environment Settings screen:

• Click the three vertical dots ( ) and select Settings. The current Environment's Settings screen opens with the following configuration tabs:

To edit Environment Settings:

1. Click the three vertical dots ( ) and select Settings.
2. Click Edit. The fields of the currently displayed tab that can be edited become editable.
3. After you change a setting value, click Save.

Details

On the Details tab, you can:

• View and change the Environment name
• View and change the Environment description
• Upload a logo URL (or change an existing one)
• View the unique Environment ID
• View the unique Tenant ID

At the Environmental Level, there can be both Admin and Viewer users. Admins have full administrative capabilities within the Environment, including all Workspaces. Users with Viewer permission have access to a full view of all data-related objects managed within the Environment, including the Workspaces.

At the Environmental Level, there can be both Admin and Viewer users. Admins have full administrative capabilities within the Environment. Users with Viewer permission have access to a full view of all data-related objects managed within the Environment..

Permissions

On the Permissions tab, you can set the access permissions for the Environment. There are two levels of access permissions: Admin and Viewer. Admin gives administrative permissions to create, modify, and delete entities within that level, while Viewer gives permission to view only.

Scopes

Scopes are the mechanism by which an Application communicates with the Authorization Platform. Scopes act as the endpoint between the two interfaces, translating the Application's Request into the required API code required by the runtime. For each Scope, you can assign a Name, connect it to one or more Applications, and assign a Cache Duration (in minutes).

For more information, see About Scopes.

API Authorizers

API Authorizers provide a plugin to control access to the Organization's APIs. For each API Authorizer (e.g., Apigee, Istio, Amazon API Gateway), you can assign a Name and Description. The Platform automatically assigns it an Authorizer ID and provides a download bundle. Step-by-step instructions to deploy the API Authorizers are available in the Admin Portal.
### Data Authorizers

Data Authorizers are used to manage the authorization of data Assets stored in data warehouses such as Google BigQuery, Trino, etc.
For more information, see Data Authorizers.