Users, roles, approvals and policy
How do I see users and roles?
Section titled “How do I see users and roles?”Open Settings, then Control users: it lists everyone who has signed in to Cortex Control. Admin is an Entra app role: it is granted in Entra, not inside Cortex Control. Studio users (builders), their role and their monthly budget are under Settings, then Studio users.
How do I approve a request?
Section titled “How do I approve a request?”Open Approvals. It lists what waits for a decision: new apps, access to sources and integrations from Studio, and assistant versions waiting to be released. Open an item and choose Approve, or reject it with a note: the person who asked sees the reason. Approving an app starts provisioning and makes that person its owner. My tasks shows approvals assigned to you.
How do I decide what builders may do?
Section titled “How do I decide what builders may do?”Open Settings, then Builder permissions. Under “What builders can do”, choose for each action (create a workspace, app, workflow, dashboard or assistant, or load ad-hoc data) Allowed, Needs approval (the request lands in Approvals) or Admins only: that is the default for everyone. Under Exceptions, add a rule for one person, an Entra group or a workspace. The most specific rule wins: the person’s own rule, then their groups, then the workspace, then the default. Admins are never limited. Settings, then Policy holds the maximum per owner, the maximum viewers per item, whether data from outside sources is allowed, and whether production publishes need a second approver.
How do I set budgets and limits?
Section titled “How do I set budgets and limits?”Open Settings, then “Cost & limits” for the monthly AI ceiling, the default budget per builder, the assistant limits and the automatic assistant re-tests. Set a personal budget per person under Settings, then Studio users.