# Distribute Access via Profiles

*<mark style="color:$primary;">Profiles are currently in Early Access - please reach out to Natoma if you'd like to try them out in your organization</mark>*

Setting up connections between AI and key business apps can be a repetitive, cumbersome process. Users need to add multiple connections to their config in Natoma, potentially going through duplicate authorization flows between their AI client and Natoma.

Profiles in Natoma provide an easy way for admins to distribute connections between AI and key business apps, minimizing the configuration steps for end users. Any app (or tool) added to a profile will be enabled by default for an end user using that profile. Changes to the profile, such as adding a new app or tool, just require the user to refresh their client, there's no additional authorization flow needed.

The below steps describe how an admin can create a default profile for their organization:

#### Step 1: Select the app(s) that should be included in the profile

*Using the <mark style="color:$primary;">green</mark> toggle on the left side of the page, select which apps should be included in the Default profile*

<figure><img src="https://3781707856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F89xcurNEGOdplgwwm3bd%2Fuploads%2Fgit-blob-f3b41d9a99d4aecca879f4858197de9714075369%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

#### Step 2: Specify whether the app should use a Personal or Managed connection

*Personal connections will use an end user's own credentials. Managed connections allow admins to* [*share access*](https://docs.natoma.ai/~/revisions/YvYDA4lzQoSkqsd1FNWT/docs/manage-ai/shared-access) *amongst multiple users.*

<figure><img src="https://3781707856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F89xcurNEGOdplgwwm3bd%2Fuploads%2Fgit-blob-e97fcef50fab39a7645a5b1f943d490a50b0cc0b%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

#### Step 3: (Optional) Specify which tools are enabled by default for an app

*All allowed tools are enabled for a connection in a profile. As an admin, you can select only a subset of these to be enabled as part of a profile.*

*Note:* [*access control policies*](https://docs.natoma.ai/~/revisions/jVAmE8QU2Mkri2NeSzYO/docs/enterprise/granular-access) *in Natoma determine whether or not AI can call a tool. A tool's inclusion in a profile determines whether it is enabled by default.*

<figure><img src="https://3781707856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F89xcurNEGOdplgwwm3bd%2Fuploads%2Fgit-blob-953cb44285129d787be27dc1cfb7d601c561c1bf%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

#### Step 4: Pick your profile you want to use.

*End users can pick between the admin-defined Default Profile* *or create their own personal profile (either from a blank template or by copying an existing profile)*

<figure><img src="https://3781707856-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F89xcurNEGOdplgwwm3bd%2Fuploads%2Fgit-blob-2d6c3730c196a444dc18113afa1b752ecb98ee69%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

***Natoma only supports one admin-defined Default Profile currently. Support for mutliple admin profiles will be coming soon.***