The Settings home and its search, the 14 groups with every page in them, who can change what, how changes apply, and where each page is explained.
Settings is at the bottom of the rail (or press G then S). It opens on a home page: a search box across the top and a card for each of 14 groups, each listing its pages. The Settings sidebar lists the same groups, and each one folds away, so the pages you never use stay out of sight. Above the groups in the sidebar sit Try changes first (test mode) and Search settings.
The Settings home: the search box and a card for each group, with the same groups in the sidebar
Every other area also has a shortcut: the last link in its sidebar (Service desk settings, Devices settings, Backup settings and so on) opens the Settings page for that area.
Type in Search settings: a page name, or a word from a single setting.
Pick a result. Each one says whether it is a page or a setting, and for a setting, the page and card it is on.
Searching Settings for a word: each result is a page or a single setting, with where it lives
The command menu (Ctrl K or Cmd K) finds settings pages by name from anywhere, for example "Settings: Device management". Every Settings page has a ? beside its title that opens its guide here.
Your account is yours: everyone can see and change their own profile, password and two-factor, notifications and out of office.
Users, Roles and permissions, Single sign-on, Modules, Licence and the other pages about the install itself are for administrators only.
The settings of each area follow that area's permission: they need Manage in the area and the role's Module settings switch. For example, a service desk manager can change queues and SLAs without being an administrator. Settings that turn a control off stay with administrators. See Roles and permissions and What each role switch controls.
Pages you cannot change are hidden, or shown read only. Pages for modules that are switched off in Modules are hidden.
Getting the Tenvara app with a QR code, the phones signed in to your account, whether your phone follows your desktop and, for administrators, what the app may do on this install
The addresses you use to sign customers up to vendors and services: your accounts domain and its mail check, a shared mailbox in your own Microsoft 365, whether customers see their sign-up mail in the portal, and how long the mail is kept
Queues, statuses, priorities, SLAs, types, categories, business hours, time, changes, rules and workflow, with templates, checklists, recurring tickets and Identity checks (how callers are verified)
How calls to your support number are answered: conversation, hours and hand-over, tickets and recordings, usage and costs. Connect it with your own phone system and AI provider accounts
Service desk section
External PSA
Where tickets, time and contracts live: the built-in service desk is the default
What people see when they click the agent's icon on their computer, with End-user experience as a tab: the windows and notifications people see on their computers
The connection and app registration, checks, starters and leavers, email security, timings, Intune, contacts, configuration and service health, with the App watchlist and Approved apps tabs
Pipelines, opportunity types, qualification, targets, commission and suggested opportunities. People with Manage sales settings can change it without being an administrator
The add-in's manifest and the steps to deploy it from the Microsoft 365 admin centre, so salespeople see the sender's contact, lead and deals beside an email and log it (MSP edition)
If you knew the older Settings menu: Security is now Password and two-factor, Sign-in is Single sign-on, Email is Support email (with Email templates as its second tab), Ticketing system is External PSA, Diagnostics is System status, and the old Automation page is Channels. Contracts is a tab of Billing rules and the AI tool catalogue is a tab of AI readiness. Automation rules and their run log now live in Settings too. Newer pages are Mobile app, Sign-up addresses and Outlook add-in, and three pages sit as tabs of another: Browser extension policy on Documentation, End-user experience on Tray menu and Identity checks on Ticket setup. Where things moved in the new menu has the full list.
Each card on a settings page has its own Save button that stays greyed out until you change something. Leaving the page without saving discards your changes. Pages with a Reset this page button can be put back to their defaults in one go.
A changed setting shows Changed and Reset to default, and many settings can differ for one customer or contract. Administrators can also try changes on themselves first in test mode. See The settings catalogue and overrides.
Permission changes apply the next time each person's session refreshes, within a few minutes.
Sign-in changes (two-factor policy, single sign-on, network access) are checked at every session refresh, so people who are no longer allowed in are asked to sign in again within 15 minutes.
Agent settings reach online agents straight away, and offline agents the next time they connect.
A few things are not in the app because they belong to the server: the address the install answers on, outgoing mail (SMTP), the relay for remote control and how the install is sized. On a hosted instance we look after them. On a self-hosted install they live in the .env file: see Install settings and profiles and Installing self-hosted.
