> For the complete documentation index, see [llms.txt](https://docs.natoma.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.natoma.ai/role-guides/natoma-for-app-admins.md).

# Natoma for App Admins

As an App Admin, you manage how AI connects to specific applications. You enable apps for your organization and configure how members can access them.

## Role scope

Your responsibility is app-level configuration:

* You manage which apps are available for AI connections
* You configure app-specific settings and tools
* You create and manage shared connections for your apps
* You define access policies for the apps you manage

You do not manage organization-wide policies, user provisioning, or enterprise settings—those are Admin responsibilities.

## What you can do

* **Enable connections** - Allow members to create their own connections to an app
* **Create shared connections** - Set up connections with admin-controlled credentials
* **Configure available tools** - Control which tools within an app are available to AI
* **Define app-level policies** - Control who can use specific tools within your apps
* **Monitor app-specific activity** - View how AI is being used with apps you manage

## Enabling AI connections

To enable an app for your organization:

1. **Enable the app** - Toggle on connections for the app. See [Enable Apps](/connect-to-ai/getting-started/enable-apps.md) for instructions.
2. **Create shared connections** (optional) - Set up connections for apps where members cannot use their own credentials. See [Shared Access to Connections](/docs/manage-ai/shared-access.md) for details.
3. **Define policies** (optional) - Control who can use specific tools within your apps. See [Granular Access Control](/docs/enterprise/granular-access.md) for details.

## What you are not responsible for

* User management and invitations (Admin responsibility)
* Organization-wide access policies - App Admins cannot edit policies for apps they do not manage (Admin responsibility)
* Single sign-on and security settings (Admin responsibility)

If you need to configure enterprise policies or invite users, contact your Admin.