# Installation administration

Whoever runs draften (the **operator**, superadmin in the interface) sees the
extra pages **Organisations**, **Installation** and **Operations** in the
menu. They cannot see inside the organisations, though: they know only their
name, bindings, owners and size.

## Installation

Defaults for every organisation — they apply wherever an organisation has not
set its own.

**Installation status** — whether `MASTER_KEY` is set (without it nothing
stored encrypted can be read), whether there is a default mail sender, which
organisations have no owner signed in yet, and how many mailboxes have no access.

**Default API keys** — model keys for organisations and mailboxes without their
own. Only here can a key to an OpenAI-compatible server (a local model) be
added, because it carries the server address. See [Model API keys](/en/admin/api-keys).

**Default outgoing mail** — where invitations go out from for organisations
without their own sender, and also the invitations to found an organisation.
See [Outgoing mail](/en/admin/outgoing-mail).

## Organisations

**Invitations to found an organisation** — the easiest way: enter the future
owner's e-mail, optionally the organisation's name (it is pre-filled) and the
language of the e-mail. The invitee gets a link valid for 7 days, founds the
organisation themselves and becomes its owner. A new invitation for the same
address replaces the old one. The list shows each invitation's status (pending,
used, expired); an unsent one can be **Sent again**, a valid one **Revoked**.
The invitee's steps are in the guide
[Founding an organisation](/en/admin/founding-an-organisation).

**New organisation** — or set it up yourself: the name, the first owner's
e-mail (and name, for a new person), optionally the Entra tenant ID and the
e-mail domains.

**Organisations set up** — the list with sign-in, owners and size. For each:

- **Edit sign-in** — the directory bindings (the owner can set them too),
- **Add an owner** — when the owner is lost,
- **Suspend** / **Resume** — a suspended organisation is locked: members
  cannot sign in and the assistants skip its mailboxes,
- **Delete** — only a suspended one, with everything in it (mailboxes,
  assistants, messages, drafts, keys, settings). User accounts stay. It cannot
  be undone; you confirm by typing the name.

## Operations

The **Operations** page shows the running workers, the assistants' lag and the
job queue. It is described in [Operations and capacity](/en/admin/operations).