Your sidebar reflects your role and the features your organization has enabled. Each page below states the role level it needs, and your admin can confirm which features are switched on.
Roles
A role decides what someone reaches in the console and the CLI. Every role sets a level - None, View or Edit - for four areas, and a Data Scope.
Data Scope is whose analytics and logs the role sees: the whole Organization, or Reportees - the holder and the people who report to them, directly or through others, as your identity provider records it. A Reportees scope reads and never writes, and organization-wide lists such as Devices are closed to it.
Built-in roles
Built-in roles are fixed. An Admin can add custom roles, built from the same areas and levels, under Settings → Console Access → Roles. A CLI token carries the same areas and levels and never exceeds its owner’s - see API tokens.
Anyone whose role has at least one area at View can sign in to the console. A Member is monitored and governed by your policies but has no console access: signing in lands on Access Restricted. The one page open to a Member, by its address, is Settings → API Tokens, for signing in the CLI. An Admin grants access under Settings → Console Access.
A few controls stay with the built-in Admin role whatever a custom role grants: console access and roles, invitations, billing, rotating API keys, sanctioning agents and MCP servers, deploying to devices, the Try It page, and Cost Management’s Rate Limit Hits and Cost Exemptions.
Every page
Analytics
Policies
AI Tools Discovery
Custom Reports
Controls that work the same everywhere
Finding a page
⌘K on a Mac, Ctrl+K elsewhere, opens a command palette from anywhere in the dashboard. It searches pages and sections — Search pages and sections… — and lists only what your role can reach, so it doubles as a way to see your own access. The sidebar also carries a Search button showing the same shortcut.The sidebar
The sidebar collapses to icons and back, and it stays the way you left it on your next visit. Docs at the foot opens this documentation in a new tab.Notifications
The bell in the header carries the background work Unbound has done for you. It holds the newest 50 items, refreshes itself while you are signed in, and shows a badge with the count -9+ beyond nine. Notifications are served to anyone who can sign in to the console.
Device scan notices go to every Admin, not only whoever triggered the scan — which is why you get notified about scans you did not run.
These are in-app only — a download, a device scan or a key rotation is never emailed. To route Unbound events into a channel a human watches, use Webhooks.
Exporting
Tables that export produce CSV of the current view, so your filters and time range carry into the file. Exporting needs Analytics · View. The Logs and Tasks exports carry logged content, so they also need Logs · View, and exports that list people across the organization need Organization scope. One export carries up to 25,000 rows, and the period dialog says so on screen — Pick a period. Max 25,000 rows. You are told before the export runs, not afterwards; narrowing the range or the filters brings it back under. Two dialogs handle exports, and they word things differently. Where you pick a period, the dialog names the filters being applied or says No filters applied. Where you pick columns, it offers Select all and Reset to default, and asks you to Pick the columns to include.
A large export is prepared in the background and the bell tells you when the file is ready. A finished file stays available for 6 hours, after which you run the export again.
What the CSV does to your data
Values are normalised so a spreadsheet opens the file correctly:- Newlines inside a value become spaces, so each record stays on one row.
- A value longer than 32,000 characters is cut.
- Some values carry a leading
'.
… [truncated] so you can tell, and plain numbers are left alone. The Analytics Tool Use export cuts without a marker.
For a prompt in full rather than truncated, read it in Logs rather than in the CSV.