Settings
The Settings page is where you configure how Tenaxis behaves for your organization. Go to Settings in the bottom of the left sidebar to access all options.
Account
Workspace Information
| Field | Description |
|---|---|
| Signed In As | Your Microsoft 365 UPN (email address) - cannot be changed here |
| Tenant ID | Your Microsoft 365 tenant identifier - shown for reference |
| Notification Email | The email address where admin alert emails are sent - you can change this to route alerts to a team mailbox |
Content stays in Microsoft 365
Tenaxis does not provide file browsing, uploads or tenant-wide document search. Open content in SharePoint or Teams.
Enhanced SharePoint Features
| Setting | Default | Description |
|---|---|---|
| Enable Enhanced SharePoint Features | Off | Grants Tenaxis the SharePoint Sites.FullControl.All application permission, held on a dedicated "Enhanced Features" app registration that is separate from the app you sign in with. Required for named document libraries, library access control, library views, navigation control, versioning, regional settings, and content types in templates. Also enables on-demand navigation and regional settings management per site from the site detail page (SharePoint tab). |
To enable: Click Enable Enhanced SharePoint Features and approve the permission in Microsoft's admin consent screen. It activates immediately - you do not need to sign in again. The permission is only requested when you click this; it never appears during normal sign-in.
What this grants, in plain terms: while enabled, Tenaxis can manage SharePoint site settings across your tenant using an app-only (background) credential - independent of any signed-in user. It is strictly opt-in, isolated on a separate app registration from the one used at sign-in, and you can revoke it at any time.
To disable: Click Disable. Templates with Enhanced configuration fields stop applying those settings; only the Basic folder structure is applied (folders in each site's default Documents library). To fully remove the permission, also revoke Tenaxis's Enhanced Features app in Azure AD Enterprise Applications.
Upgrading existing sites: When you enable Enhanced Features after sites have already been provisioned, those sites show an amber "Upgrade to Enhanced Features" banner on their detail page. Use this to re-apply the template in enhanced mode - existing Documents folders are never deleted. See Templates for details.
Lifecycle Management
Controls how Tenaxis handles inactive (stale) sites. See Lifecycle Management for the full explanation.
| Setting | Default | Description |
|---|---|---|
| Enable Lifecycle Management | On | Turns the entire lifecycle system on or off. When off, no sites will be flagged as stale. |
| Inactivity Threshold (days) | 90 | How many consecutive days without activity before a site is flagged and the owner notified. |
| Renewal Window (days) | 14 | How many days the site owner has to click the renewal link before the site is escalated to admin. |
Recommendation: Keep the default settings (90 days inactive, 14 days window). Only reduce the inactivity threshold if your organization has a policy requiring more frequent review (e.g., 30 or 60 days).
Alerts
Controls what events trigger notifications and emails to admins.
| Setting | Default | Description |
|---|---|---|
| Risk Score Threshold | 70 | Sites that score above this number will trigger a risk.high event and alert. Set to 0 to disable risk alerts entirely. |
| External User Alerts | On | Notify admins when an external/guest user is added to any site. |
| Stale Sync Alert (days) | 7 | Alert when a site's membership data hasn't been synced from Microsoft 365 for this many days. Set to 0 to disable. |
| Weekly Digest | Off | Send admins a weekly email every Monday summarizing all sites above the risk threshold. |
Guidance on Risk Threshold:
- 60–70 - Good balance; catches most concerning sites without too many false alerts
- Below 50 - More sensitive; you'll see alerts for sites that have any external users or sharing enabled
- Above 80 - Less sensitive; only the most severely misconfigured sites will alert
- 0 - Disables risk alerts entirely
Naming Policy
A naming policy defines rules that site names must follow. When configured, Tenaxis will enforce these rules whenever a new site is provisioned.
| Setting | Description |
|---|---|
| Required Prefixes | Site names must start with one of these strings (e.g., IT-, HR-, PROJ-). If multiple are listed, the name must match at least one. |
| Required Suffixes | Site names must end with one of these strings (e.g., -2026, -Internal). |
| Blocked Words | Site names must not contain any of these words (e.g., test, temp, delete). Case-insensitive. |
Example configuration:
- Prefixes:
IT-,HR-,MKTG-,FIN-,OPS- - Suffixes: (none)
- Blocked words:
test,temp,draft,delete,old
With this, a site named test-project would be rejected, but IT-project-management would be accepted.
To set up a naming policy:
- Click Edit next to Naming Policy
- Add prefixes, suffixes, or blocked words using the input fields
- Click Save
To remove a prefix/suffix/word, click the X next to it.
Access Reviews
Reviewers sign in through Microsoft Entra with an authorised identity. There is no tenant-wide OTP setting; an administrator can grant an e-mail code fallback for one individual review when a reviewer cannot sign in. Controls the periodic access review cycle. See Access Reviews for the full explanation.
| Setting | Default | Description |
|---|---|---|
| Enable Access Reviews | Off | Turns the access review system on or off. |
| Frequency | Quarterly | How often reviews are triggered: Monthly, Quarterly, or Annually. |
| Review Due (days) | 14 | How many days site owners have to complete each review before it expires. |
Frequency Guidance:
- Monthly - High-security environments; lots of admin overhead; best for highly sensitive sites
- Quarterly - Most organizations; balances thoroughness with practicality
- Annually - Low-activity environments; minimal overhead but less oversight
Offboarding
Controls automatic handling of disabled employee accounts. See Offboarding for the full explanation.
| Setting | Default | Description |
|---|---|---|
| Auto-Remove Disabled Accounts | Off | When enabled, the nightly scan automatically removes users with disabled Entra ID accounts from all site memberships. Sole owners of sites are excluded and flagged for manual review. |
Recommendation: Enable this for most organizations. The safety guard (not auto-removing sole owners) prevents orphaned sites.
Webhooks
Manage webhook registrations for integrating Tenaxis events with external systems. See Webhooks for the full explanation.
From this section you can:
- View all registered webhooks and their status
- Add a new webhook (URL + events to subscribe)
- Edit an existing webhook
- Test a webhook by sending a sample payload
- View delivery logs to check if deliveries are succeeding
- Delete a webhook
Saving Changes
Each section of Settings has its own Save button. Changes are saved per-section - you don't need to save the entire settings page at once. Each save is logged in the audit trail.
Settings and your plan
No setting is constrained by your plan. Tenaxis has one plan with every feature included, and there is no limit on the number of sites, workspaces or administrators. Only the price band depends on the size of your directory. See Billing & Plans.