# Organizations, projects, and operations Understand the responsibilities and entry points for organization management, project permissions, and system operations. 使用指南 · 模块: admin · 管理人员 · 部署形态：资料未说明 · 已确认产品版本：资料未说明 · 来源：现有文档 Managing teams, managing projects, and maintaining deployments each have their own entry points. Identify the kind of action first, then use the appropriate role; system administrators, organization administrators, and project administrators are different identities. ## Choose the right entry point | Task | Entry point | Required identity | | ---------------------------------------------------------------------- | ----------------------------------------------------------- | ----------------------------------------------------------------------- | | Invite colleagues, adjust organization roles, disable members | Profile → Organization → Member management | Organization Owner or Admin; individual actions are constrained by role | | Create or govern projects in the organization | Profile → Organization → Project management | Organization Owner or Admin | | Configure WeCom or WPS and select members to import | Profile → Organization → Enterprise integrations | Organization Owner or Admin | | Manage project resources and members | Project settings | Effective project owner or administrator | | View global users and the project directory, adjust runtime parameters | Avatar → System settings | System administrator | | Activate a private deployment license | Profile → Organization → Organization settings → Enterprise | Private deployment system administrator | For organization basics and deployment differences, see [Organizations and projects](https://docs.asktable.com/en/organization/overview). For Cloud plans, billing administrators, and usage, see [Plans and usage](https://docs.asktable.com/en/organization/plans-and-usage). ## Manage organization and project members Organizations have Owner, Admin, and Member roles; Cloud also has Guest and Billing Admin. Projects have three roles: owner (OWNER), administrator (ADMIN), and member (MEMBER). When adding project members, select multiple active members from the current organization and assign Admin or Member. People outside the organization must accept an invitation first; the project dialog no longer searches global accounts by email or phone number. See [Invite members](https://docs.asktable.com/en/organization/invitations) for the full steps. Public projects are open only to active Owners, Admins, and Members in the current organization, with Admin or Member as the default role. Explicit project roles take precedence; Guests still require explicit membership, and Billing Admins do not participate in projects. Project owners can adjust the project type and default permissions in Project settings. Organization Owners/Admins can govern projects but cannot open private content without an effective project role. Private deployment system administrators' global project directory also does not automatically grant content access. Cloud system administrators separately have global project governance and content access permissions. ## Manage platform accounts System administrators view and maintain global accounts in **System settings → Users**. They can search, create, edit, import in bulk, or delete accounts. An account's system identity is system administrator or regular user, managed separately from organization roles. Bulk import supports `.xlsx`, `.xls`, and `.csv`. Fill in names, email addresses, and passwords using the template downloaded from the page. Import WeCom/WPS members through organization enterprise integrations to establish the correct enterprise identity bindings. Organization member management does not change email addresses, passwords, or system identities, or delete global accounts. Before deleting an account or disabling an organization member, transfer the projects they own; an organization Owner must also transfer organization ownership first. See [Members and roles](https://docs.asktable.com/en/organization/members-and-roles) for the rules. Account creation in a private deployment is subject to the license's user limit. Disabling public registration only changes the registration entry; administrators cannot bypass the user limit when creating accounts. ## Manage project API-Keys Create and manage keys in the corresponding project's **Project settings → API-Key**: - `admin` can manage that project's resources; - `asker` is for limited-permission calls such as asking data questions. Choose permissions for the intended use and keep keys secure. API-Keys belong to projects and are not organization roles or system administrator identities. See [Web embedding](https://docs.asktable.com/en/integrations/embed) for website integration and [OpenAPI](https://docs.asktable.com/en/integrations/openapi) for programmatic access. ## Adjust runtime parameters System administrators open **System settings → System**. Each field saves separately: leave a numeric input after editing, or toggle a switch, to submit. Watch the current field's save status and error messages. | Section | Configuration | | ----------------- | ----------------------------------------------------------------------------------------- | | General | Frontend URL, affecting links in emails and notifications | | Conversations | Runtime parameters such as the maximum steps per Agent run | | Excel file limits | File size, sheet count, and field count | | CSV file limits | File size and field count | | Data sources | Query timeout, table limit, metadata batch size, and value index limits | | Web search | Model service URL, API Key, and model | | User registration | Public registration switch for private deployments and new-password strength requirements | Common defaults are listed below; the current deployment settings take precedence: | Parameter | Default | | ------------------------------------------------------------ | ------------------------------------------- | | Maximum steps per Agent run | 100 | | Global query timeout | 30 seconds; configurable from 1–300 seconds | | Maximum tables per data source | 100 | | Tables per metadata processing batch | 10 | | Unique values per field index / maximum value-indexed fields | 50000 / 10 | | Excel file size / sheet count / field count | 10 MB / 20 / 200 | | CSV file size / field count | 20 MB / 50 | Deployment login, SMTP, and SMS use environment variables; see [Deployment authentication configuration](https://docs.asktable.com/en/deploy/authentication). For connection pools and process counts, see [Operations and capacity planning](https://docs.asktable.com/en/deploy/operations). These are not runtime parameters that can be updated live on this page. ## Common issues | Symptom | Resolution | | --------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- | | No System settings entry | Check whether the account is a system administrator; organization administrators do not automatically have system permissions | | Can manage a project but cannot open content | Check the explicit project role or public project's default role | | A removed member can still enter a public project | Removing explicit membership falls back to default permissions; adjust the project type or organization membership status as needed | | Saving resource configuration is rejected | Check that the effective project role is owner or administrator; regular project members cannot manage resource configuration | | Cannot find a project candidate after inviting them | Confirm they have joined the current organization and are active; Billing Admins do not participate in projects | | Need to identify the deployment version | Open System settings → About, then view and copy version information |