# Miscellaneous settings

> Global settings that shape how Cloud Management Platform (CMP) behaves at login, on screen, on the order form, and when it interacts with other systems

---

Site [llms.txt](/llms.txt)

---

The **Admin** > **Miscellaneous Settings** page is divided into five tabs, and a search box above them filters across all tabs. Within a tab, **toggles** save once changed. Other settings are read-only until you select **Edit**, which opens a dialog that saves on submission.

## Login

Sessions, single sign-on, embedded mode, and legal notices.

### Quick toggles {#quick-toggles-login}

| Setting | Default | Description |
| --- | --- | --- |
| **Automatically Login to SSO** | Disabled | Redirects users to the configured SSO provider for login instead of showing the CMP login form. |
| **Display Legal Notice on every Login** | Enabled | Shows the Legal Notice Text after every login. Disable it to show the notice to each user only once. |
| **Require New Users to Self-Assign Passwords** | Disabled | Sends a password-reset email to each newly created user so they can set their own password, rather than an admin assigning one. See [Create a user](/docs/cmp/configure/access-and-security/users/create-a-user/). |
| **Enforce Single Sessions for Users** | Disabled | Logs a user out of their first session when they log in from a second browser or location. |
| **Require User Email Verification** | Enabled | Sends a verification email automatically whenever a user's email address changes. |
| **Disable Edit Email By User** | Disabled | Prevents users from changing their own email address in Manage profile. |
| **Show ResourceType for Profile** | Disabled | Limits the resource types a user sees to those with at least one resource visible to that user. |
| **Embedded Mode** | Disabled | Allows CMP to render inside an iframe without the navigation bar. Set **Embed URLs / Frame Ancestors** and **Allowed Global Roles in Embedded Mode** to finish the configuration. See [Embed in ServiceNow](/docs/cmp/configure/integrations/it-service-management/embed-in-servicenow/). |
| **Hide 'Domain' dropdown** | Disabled | Removes the Domain dropdown from the login page. Domain users then log in with `username@domain` in the Username field. |

### Settings {#settings-login}

| Setting | Default | Description |
| --- | --- | --- |
| **Allowed Global Roles in Embedded Mode** | Super Admin | The global roles that reach CMP directly while Embedded Mode is enabled: Super Admin, Devops Admin, or Global Viewer. Everyone else is redirected to the same page with `?frame=true` appended. Super Admin must always be included. See [Global roles](/docs/cmp/configure/access-and-security/groups-roles-permissions/global-roles/). |
| **Embed URLs / Frame Ancestors** | Empty | A space-separated list of the parent sites allowed to embed CMP in an iframe. It sets the frame-ancestors directive in the appliance's Content-Security-Policy. Entries can mix formats: `example.com`, `*.example.com`, or a full URL with a port and path. |
| **Legal Notice Text** | Empty | Text shown to users at login. They must select **Agree** to continue; **Disagree** logs them out. Leave the field blank to turn the notice off. |
| **Default Redirect (restart Web Server)** | /dashboard/ | Where CMP sends a user who navigates to the site root or selects the logo in the navigation bar. Other common values are `/catalog/` and `/servers/`. Restart the web server for a change to take effect. |

## UI

Branding, navigation links, security messaging, and inactivity timeouts.

### Quick toggles {#quick-toggles-ui}

| Setting | Default | Description |
| --- | --- | --- |
| **Avatars** | Enabled | Shows each user's Gravatar image, which requires a Gravatar profile tied to their email address. Disable it to show the user's initials instead. |
| **Password Toggle** | Disabled | Lets users unmask passwords in form fields. |
| **Show video tips** | Enabled | Shows video tip icons through the UI. Selecting one opens a short video about that feature or screen. |
| **Show "Dashboard" in navigation bar for all Users** | Disabled | Adds a Dashboard link to the navigation bar for every user. |
| **Show "Groups" in navigation bar for all Users** | Disabled | When disabled, users without the `group.change_attributes` permission, Global Viewer, or Super Admin do not see the Groups link and cannot open the Groups list page. |
| **Show "Reports" in navigation bar for all Users** | Disabled | When disabled, users without Global Viewer or Super Admin do not see the Reports link and cannot reach the reports. See [Reports](/docs/cmp/use/reports/). |
| **Show "Servers" in navigation bar for all Users** | Disabled | Adds a Servers link to the navigation bar for every user. |

### Settings {#settings-ui}

| Setting | Default | Description |
| --- | --- | --- |
| **CloudBolt Cloud Cost & Security Optimization Link** | Kumolus URL | The URL behind the Cloud Cost & Security Optimization entry in the user menu. Leave it blank to remove that entry. |
| **Security Message** | Empty | A message shown under the navigation bar on every page, up to 1000 characters. Supports the a, b, i, span, br, and h1-h6 tags. |
| **Inactivity Timeout (minutes)** | 20 | Minutes of inactivity before a user is logged out. Set it to 0 to disable the timeout. |
| **Maximum depth of Group ancestry** | 0 | How many levels of ancestor names to include when a group name appears outside the group hierarchy. |
| **Group Types shown on Order form** | None | The group types offered in the Group field on the order form. |
| **Generic Error Message** | Empty | The message shown on failed job pages, HTTP error pages such as 404 and 500, and other pages where something went wrong. Use it to point users to internal support. Supports the a, b, i, span, br, and h1-h6 tags. While the field is blank, CMP shows its own text, which names CloudBolt support. |
| **Default User Display Scheme** | Username | How users are labeled wherever you pick one, such as changing a resource's owner: Username, Full Name, Last Name First Name, or First Initial Last Name. |
| **Custom Help URL in navigation bar** | Empty | Replaces the app switcher's links to the CloudBolt documentation, release notes, and support with a single link labeled Support that points here. |
| **Disabled Reports** | None | Built-in reports to hide from the Reports list for all users. Custom reports are not listed here. |
| **Disabled Recent Activity categories** | None | Activity categories to exclude from the Recent Activity item on the dashboard for all users. |

## Ordering

Order form behavior, quotas, and hostname rules.

| Setting | Default | Description |
| --- | --- | --- |
| **Allow exceeding quotas** | Disabled | Turns every quota into a soft limit. Groups can order past their quota, and a parent group can delegate more capacity than it has left. |
| **Show "Cost Preview" on Order forms** | Enabled | Shows a cost preview for each environment on the order form. |
| **Allow resuming failed Blueprint's Job** | Enabled | Lets blueprint admins set a blueprint to pause its job on failure, so a user can resume it after troubleshooting. Recommended outside production only, since a paused job holds the job engine open. |
| **Show "Rates" when ordering** | Enabled | Shows rate information when ordering servers. See [Rates](/docs/cmp/configure/order-forms-and-pricing/rates/). |
| **Auto enable Actions** | Enabled | Enables newly created actions automatically. When disabled, a new action cannot be used until it is enabled. Two exceptions are always enabled: actions added on a blueprint's Build tab, and generated parameter options actions for Regenerated Options dependent fields. |
| **Show boolean inputs as dropdowns** | Enabled | Shows a True/False dropdown for boolean parameters instead of a checkbox. |
| **Fast track Server Deletion** | Disabled | Starts decommission jobs immediately instead of sending the request through order approval. |
| **Show New Server button** | Enabled | Disable it to hide the New Server button throughout the UI for users without Super Admin privileges. |
| **Hostnames case sensitive** | Disabled | Treats `server01` and `SERVER01` as different names when generating unique hostnames. |
| **Reuse historical hostnames** | Enabled | Reuses hostnames from servers that are no longer active when generating unique hostnames during provisioning. |
| **Reuse historical resource names** | Enabled | Reuses names from resources that are no longer active. |
| **Inherit Group Parameters** | Enabled | Subgroups inherit their parent group's parameters and preconfigurations, including any options and constraints set in the parent group. |
| **Replace slider with input box on order form** | Disabled | Shows a text box for integer parameters so values can be typed directly, instead of a slider. |
| **Replace pre-config option's radio button with dropdown list on order form** | Disabled | Shows preconfiguration options in a dropdown instead of radio buttons. |
| **Show "Group" input on Order forms if only one choice exist** | Enabled | Disable it to hide the Group field when the person ordering has only one group option. |
| **Restrict new Environments** | Enabled | New environments are assigned only to the Unassigned group, which keeps them off the order form until you associate them with other groups. |

## Resource management

Content syncing, action execution rules, admin email, remote script directories, order form fields, and the job timeout.

| Setting | Default | Description |
| --- | --- | --- |
| **Remote Content Mode** | Disallow editing | Whether blueprints that come from a remote source code repository can be edited in CMP. Editing is generally disallowed in production and enabled in development. See [Integrate a remote source code repository](/docs/cmp/configure/integrations/source-code-repository/). |
| **Action Execution Rule** | Always allow | Whether a server or resource action can start while another action is already running on the same server or resource. This setting appears only on appliances with the concurrent-action feature enabled. |
| **External URL Whitelist** | Allow all | A semicolon-separated list of the domains that webhooks and actions with source code at an external URL are allowed to reach. Entries are regular expressions and can be IPv4 addresses. The default entry allows everything. |
| **CB Admin Email Address(es)** | Empty | One admin email address, or several as a comma-separated list. See [Email](/docs/cmp/configure/administration/system/email/). |
| **\*nix Temporary Directory for Remote Scripts** | Empty | The directory CMP writes remote scripts into on Linux and UNIX VMs. |
| **Windows Temporary Directory for Remote Scripts** | Empty | The directory CMP writes remote scripts into on Windows VMs. |
| **Default Job Timeout (seconds)** | 28800 | How long a job may run before it times out. The default is 28800 seconds, or 8 hours. |
| **Default IP Addressing Scheme** | IPv4 | Which address CMP uses for a server when both are known: IPv4, IPv6, or Resource Handler Decides. |
| **Show "Recipient" on Order forms** | Never | When the Recipient field appears for permitted users. **When Allowed** shows it wherever the user has permission; **Only Enabled Blueprints** shows it on the blueprints a blueprint manager has turned it on for; and **Never** hides it. While the field is hidden, the person placing the order is the sole recipient. |
| **Show "Name of Deployed Service" input on Order forms** | Only without a template | Whether the resource name field appears **Always**, or **Only when there is no resource name template** to generate the name. |
| **Terraform Version** | Varies | The Terraform version used to run Terraform Plan blueprint actions. The list offers the versions installed on the appliance, plus None. |

## Web Proxy

The proxy CMP uses to reach the internet, and the domains that should bypass it.

| Setting | Default | Description |
| --- | --- | --- |
| **Web Proxy** | Not configured | The proxy server CMP routes outgoing connections through, including calls to public cloud providers. The dialog takes a protocol, address, port, and optional credentials, saved as a [Connection Info](/docs/cmp/configure/integrations/connection-info/) entry named Web Proxy. |
| **Bypass Proxy Domains** | Empty | A comma-separated list of the domains CMP should reach directly rather than through the proxy. Entries are regular expressions and can be IPv4 addresses. |

## Related

- [Email](/docs/cmp/configure/administration/system/email/): SMTP configuration and the addresses CMP sends from.
- [Embed in ServiceNow](/docs/cmp/configure/integrations/it-service-management/embed-in-servicenow/): Embedded Mode and Embed URLs in an iframe setup.
- [Global roles](/docs/cmp/configure/access-and-security/groups-roles-permissions/global-roles/): Super Admin, Devops Admin, and Global Viewer.
- [Branded portals](/docs/cmp/configure/administration/system/branded-portals/): per-portal branding and login display.