Edit Domain¶

Edit Domain contains the domain-level settings for appearance, calendars, artificial intelligence, integrated services, login behavior, API keys, security profiles, IP restrictions, password policy, and domain-specific email settings.

Use this page when the change should affect one domain rather than every domain in the application.

Quick Routing¶

Use the matching section below based on the kind of change you need:

go to Appearance for theme, logo, or CSS changes
go to Calendars for working-time and holiday rules
go to Localization to translate folder, channel, and dashboard text for each language
go to Artificial Intelligence to configure AI providers, MCP token limits, and Ema instructions
go to Security for integrated services, login behavior, API keys, and security profiles
go to IP Restriction when access should be limited by network
go to Password Policy for domain-level password rules
go to E-Mail for domain-specific outbound mail settings

If the question is mainly about how scopes, groups, ACLs, and API keys fit together, start with Security and Permissions.

Appearance¶

Use this section to control how the domain looks to users.

Theme¶

Sets the default color theme for the domain.

Logo¶

Uploads a custom logo for the domain.

CSS¶

Adds custom CSS that can extend or override the selected theme.

Note: The previous documentation referenced video links for logo and calendar editing. Those placeholders are removed here, but the operational settings are preserved.

Calendars¶

Calendars define working time and holiday behavior used for reminders and deadline calculations.

Name of Calendar¶

Friendly name used to save the calendar.

Working Days¶

Selects which days are treated as working days.

Working Hours¶

Defines the active working window.

Start time
End time

Annual Holidays¶

Holidays repeated every year regardless of the year value entered.

Holidays¶

Non-recurring holidays that apply only to the entered year.

Localization¶

Use this section to localize the names of the domain's folders and channels, along with dashboard panel and link titles. The original text remains the source value; users see the localized value when their selected language has a translation. If a translation is not available, Emakin displays the original source text.

Language¶

Add a language entry and select its language code. Each language has its own list of translations.

Source Text and Localized Text¶

The table lists the source name on the left and the value to display for the selected language on the right.

Folder names are shown with a folder icon.
Channel names are shown with a # icon.
Dashboard panel titles and dashboard link titles are shown with a generic text icon.
An empty localized value is highlighted so that missing translations are easy to find.
The blue text below a localized value can be selected to copy the available automatic translation suggestion into the editable field.

Use Edit to change translation values. Use Details to expand or collapse the translation list for a language. Save the domain after making changes.

Artificial Intelligence¶

Use this section to configure the AI services and assistant behavior for the current domain.

Services¶

Lists the AI providers available to the domain. Domain-level provider values override application-level providers with the same client type.

The available settings depend on the provider and include:

Enabled
Name
Client Type
Base URL
API Key
Model
Context Length
Input Modalities

Token Limits¶

Defines MCP token usage limits for the domain. A rule can target a user, a group, or the whole domain, and can be assigned to the User or Development context. Use Enabled to activate or deactivate a rule.

Instructions¶

Defines additional system instructions for the Ema assistant. Add one or more instruction entries and configure each entry with:

Context: User, Development, or Admin
Instruction: multiline plain text; rich-text formatting is not used
Enabled: whether the instruction is active

Enabled instructions whose context matches the current assistant context are appended to the main executor system prompt in the order shown. User requests and document contents remain separate inputs and are not treated as domain instructions.

Security¶

Integrated Services¶

Lists integrated services that may be enabled for the domain as calendar, file-sharing, or login providers.

The existing documentation notes that these services are configured by the system administrator and may be available globally, while domain administrators decide whether to use them for the domain.

Controls login behavior for the domain.

Use Single Session¶

Logs users out of previous sessions when they sign in from another device.

New Device Notification¶

Controls whether users are notified when a new device is detected.

Lists the configured login methods that a domain administrator can enable or disable for the domain. The existing documentation also notes that 2FA can be required after login succeeds.

API Keys¶

API keys authenticate applications or users against Emakin REST services.

Use API keys when an external caller should receive a limited capability set without interactive user login.

Description¶

Friendly name for the API key.

Details¶

Permission list that defines which operations the API key may perform.

Domain API key permissions

Security Profiles¶

Security profiles centralize access-control rules for folders, processes, documents, and other secured content.

Use a security profile when the same baseline ACL rules should be reused across multiple secured objects.

Name¶

Name of the security profile.

Access Control List¶

Each entry can define:

Identity
Permissions
Type (allow / deny)
Begins At
Expires At

The documented permission levels are:

Read
Execute
Write
All

IP Restriction¶

IP restriction blocks access to the domain from selected IP addresses or IP ranges.

Supported formats in the existing documentation include:

single IP, such as 192.168.1.10
explicit range, such as 169.258.0.0-169.258.0.255
CIDR notation, such as 192.168.0.0/24
subnet mask notation, such as 192.168.0.0/255.255.255.0

Warning: 127.0.0.1 is always allowed. Be careful not to remove your own remote access unintentionally.

Password Policy¶

Controls password rules at domain level.

The documented settings are:

Minimum Password Length
Minimum Numeric (0..9) Letters
Minimum Upper Case (A..Z) Letters
Minimum Lower Case (a..z) Letters
Required Chars

E-Mail¶

This section stores domain-specific outbound email configuration.

E-Mail Actions¶

Controls whether users can perform actions on assigned tasks without opening the system directly.

Mail Services¶

Multiple mail-service entries may be configured, but only one should be enabled at a time. If no enabled domain-level configuration exists, the system falls back to the documented domain email configuration behavior.

The preserved settings include:

Enabled
From Address
From Display Name
Host
Port
User Name
Password
Enable SSL