890 pages for allow.

Account Claude Documentation · in the page government/account/profile …reated or when directory sync placed you. | | **Role** | What you are allowed to manage. **User** means you can use Claude but do not administer anything. **Owner** means you can manage your organizat… Usage Claude Documentation · in the page government/account/usage # Usage > Use this page to see how much of your Claude allowance you have used and when it refreshes. > **Who this is for:** Anyone with a Claude for Government account. Use this page to see how mu… Claude for Government changelog Claude Documentation · in the page government/changelog …ed the Admin Console's Group mappings page to refuse a seat tier that allows no models or has a \$0 spend limit, because the group's members could not have used Claude for Government; a mapping that a… Available settings Claude Documentation · in the page government/config/settings …or shorten the maximum but not lengthen it past what the level above allows. | No maximum | All products | | [**Allowed network hosts**](#allowed-network-hosts) | A list of hostnames that tools in Cl… Set up the Microsoft 365 connector Claude Documentation · in the page government/connectors/microsoft-365 …per://auth`, remove that entry. Claude Desktop does not use it. **3. Allow public client flows** Still under **Authentication**, find **Allow public client flows** (on the **Settings** tab under **W… Connectors Claude Documentation · in the page government/connectors/overview …hen save the connector. Members are still asked before Claude uses an allowed tool. > > On the Plugins card, select Add plugins and drop a zip file. The preview shows its name and version. Choose Auto… Connect Claude Code to Claude for Government Claude Documentation · in the page government/deploy-claude-code/configure …er signs in to Claude Code on more devices than Claude for Government allows at once (six), which ends the sign-in closest to expiring (see [Sessions](https://claude.com/docs/government/account/sessio… Connect Claude Desktop to Claude for Government Claude Documentation · in the page government/deploy-desktop/configure …el enabled. * **Devices and browsers can reach the hosts they need.** Allow the hosts under [Network access](#network-access). * **The device meets Claude Desktop's requirements.** See the Claude Desk… Windows fleet checklist Claude Documentation · in the page government/deploy-desktop/windows-checklist …top-for-windows) covers downloading and distributing the package. * **Allow trusted app installation.** Make sure Windows policy allows trusted app packages to install from outside the Microsoft Store… Models in Claude Desktop Claude Documentation · in the page government/desktop/models …he whole conversation rather than a summary, so it uses more of your [allowance](https://claude.com/docs/government/account/usage.md) and responses can take longer to start. ## Model availability for… Plugins in Claude Desktop Claude Documentation · in the page government/desktop/plugins …e asks before it searches. The card shows the search it wants to run. Allow it once, allow it for this task, or deny it. > > A plugin packages skills and commands from your organization. Plugins lists… Skills in Claude Desktop Claude Documentation · in the page government/desktop/skills …have a skills view or per-skill controls, so there is no setting that allows, blocks, or distributes a skill on its own. To distribute skills to the members you manage, bundle them in a plugin, which… Video walkthroughs for Claude Desktop Claude Documentation · in the page government/desktop/video-walkthroughs …e asks before it searches. The card shows the search it wants to run. Allow it once, allow it for this task, or deny it. > > A plugin packages skills and commands from your organization. Plugins lists… Moving from Claude for Government Web Claude Documentation · in the page government/moving-from-web …/configure.md#order-of-deployment). * **Which hosts must the firewall allow, and what if claude.ai is blocked?** See [Network egress, required domains, and proxies](https://claude.com/docs/government/… Readiness Claude Documentation · in the page government/org-admin/readiness …a model to your seat tier** | No seat tier in this organization both allows a usable model and has usage limits high enough for one request, so nobody can send a message regardless of credits or seat… Seat tiers Claude Documentation · in the page government/org-admin/seat-tiers …tenant's billing account. On the detail page you can see the tier's **Allowed models**, its **Default model**, and whether **Always start with the default model** is on. The spend limits aren't shown,… Seats Claude Documentation · in the page government/org-admin/seats …been allocated. You cannot assign more users to a tier than its limit allows, and a self-managed tier [may have no limit](https://claude.com/docs/government/org-admin/seat-tiers.md#anthropic-managed-v… Setup wizard Claude Documentation · in the page government/org-admin/setup-wizard …ktop, Claude Code, and Claude for Microsoft 365. Turning a product on allows your members to sign in to that application, unless your tenant administrator has turned it off for the whole tenant. This… Users Claude Documentation · in the page government/org-admin/users …y next request. If you move someone to a tier with a different set of allowed models, any model that is no longer in their tier's allowlist becomes unavailable to them immediately. > [!WARNING] > > I… Security and data handling Claude Documentation · in the page government/security/security-and-data-handling …prompts, administrator-set per-tool policies, and the network egress allowlist applied when each tool runs. Code sessions also run outside the virtual machine, as described under [Code in Claude Desk… Admins Claude Documentation · in the page government/tenant-admin/admins …the access is broad, keep the list as short as your operational needs allow. * If the only person on this list leaves your agency or loses account access, contact Anthropic to have a new tenant admini… Tenant restrictions Claude Documentation · in the page government/tenant-admin/tenant-restrictions …hed from your agency's network by having your network proxy inject an allowlist header. > **Who this is for:** IT and network administrators who operate their agency's outbound web proxy or secure we… Video walkthroughs for administrators Claude Documentation · in the page government/video-walkthroughs …hen save the connector. Members are still asked before Claude uses an allowed tool. > > On the Plugins card, select Add plugins and drop a zip file. The preview shows its name and version. Choose Auto… Data storage and retention Claude Documentation · in the page office-agents/data-storage …ing traces and logs, the add-in removes every field that is not on an allowlist, so they exclude conversation text, document contents, file names, and the names of your connectors and their tools. Bef… Security, admin auditability, and analytics Claude Documentation · in the page office-agents/enterprise-readiness …rols and retention. Only spans sent to Anthropic's own collector are allowlist-filtered to strip sensitive attributes; that path is bypassed entirely when a custom endpoint is set. The add-in export… Use Claude for Excel Claude Documentation · in the page office-agents/excel …deploy Claude for Excel through the Microsoft 365 Admin Center. **1. Allow Office Store access** In the [Microsoft 365 Admin Center](https://admin.microsoft.com), go to Settings, Org Settings, User… Configure a custom OpenTelemetry collector Claude Documentation · in the page office-agents/opentelemetry …content: prompt text, tool inputs and outputs, and document URLs. The allowlist filter that strips sensitive attributes on the Anthropic path does not run on this path. One normalization still applies… Use Claude for Outlook Claude Documentation · in the page office-agents/outlook …ploy Claude for Outlook through the Microsoft 365 Admin Center. **1. Allow Office Store access** In the [Microsoft 365 Admin Center](https://admin.microsoft.com), go to Settings, Org Settings, User… Use Claude for PowerPoint Claude Documentation · in the page office-agents/powerpoint …y Claude for PowerPoint through the Microsoft 365 Admin Center. **1. Allow Office Store access** In the [Microsoft 365 Admin Center](https://admin.microsoft.com), go to Settings, Org Settings, User… Use Claude for M365 with third-party platforms Claude Documentation · in the page office-agents/third-party-platforms …resources. Anthropic cannot provide or reset credentials. ## Network allowlist The add-in requires access to specific domains. The required domains differ depending on whether your organization uses… Use Claude for Word Claude Documentation · in the page office-agents/word …deploy Claude for Word through the Microsoft 365 Admin Center. **1. Allow Office Store access** In the [Microsoft 365 Admin Center](https://admin.microsoft.com), go to Settings, Org Settings, User… Manage plugins for your organization Claude Documentation · in the page plugins/admin …th **Publish to org** on the plugin's page. You decide whether that's allowed and whether each request waits for your approval. [Publish a plugin to your organization](https://claude.com/docs/plugins/… Plugin feature support across platforms Claude Documentation · in the page plugins/platform-support …stalled by default**, or **Required** | In managed settings, an admin allowlists or blocks marketplaces and force-installs plugins | [Manage plugins for your organization](https://claude.com/docs/plug… Plugin pre-submission checklist Claude Documentation · in the page plugins/pre-submission-checklist …hor.name` | | In a fork, give the plugin a name of its own. Forks are allowed. | Held for a reviewer | **Fork uses the upstream project’s name** | | Write `displayName` and `author.name` in one writin… Create custom skills Claude Documentation · in the page skills/how-to …](https://code.claude.com/docs/en/headless), which can't stop to ask, allow the script on the command line, for example `--allowedTools "Bash(python3 /path/to/my-plugin/skills/render-chart/scripts/ren… Deploy with Enterprise Admin Console Claude Documentation · in the page third-party/claude-desktop/admin-console …rvers to a subset by name, and change built-in tool settings, network allowlists, telemetry, token limits, the banner, and **Claude.ai data import**. The inference connection (the provider, its endpoi… Deploy Claude Desktop on 3P with Amazon Bedrock Claude Documentation · in the page third-party/claude-desktop/bedrock …om/singlesignon/), create a permission set with an inline policy that allows Amazon Bedrock inference. The minimal policy is: ```json theme={null} { "Version": "2012-10-17", "Statement": [{ "… Deploy with a bootstrap server Claude Documentation · in the page third-party/claude-desktop/bootstrap …for per-group profiles: per-user gateway credentials, per-team model allowlists, or per-user OpenTelemetry attribution. When one configuration or a few group-scoped profiles cover your fleet, [deploy… Built-in browser and Claude in Chrome Claude Documentation · in the page third-party/claude-desktop/browser …rks on every site except the ones you block, or only on the sites you allow. Then add sites with the **Add websites** button. These site permissions are the same ones the built-in browser uses for you… Chat in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/chat …, never inside a sandbox. Every fetch is checked against `coworkEgressAllowedHosts`; with no allowlist configured, fetch is disabled. See [Web fetch](https://claude.com/docs/third-party/claude-desktop… Code in Claude Desktop on 3P Claude Documentation · in the page third-party/claude-desktop/code …e** hidden, whatever this key is set to. To change what **Auto mode** allows and blocks, see [Tune the Auto mode classifier](#tune-the-auto-mode-classifier). To have the model provider review actions… Configuration reference Claude Documentation · in the page third-party/claude-desktop/configuration …alog URL | Connection | | | [`coworkTabEnabled`](#coworktabenabled) | Allow Cowork | Capabilities | Admin Console | | [`isClaudeCodeForDesktopEnabled`](#isclaudecodefordesktopenabled) | Allow Code | C… Configuration changelog Claude Documentation · in the page third-party/claude-desktop/configuration-changelog …ns it installed no longer load, even where the key is still set. Use `allowedPluginMarketplaces` instead. **v4.16336.0** 2026-11-03 | MDM key | Type | Description | | - | - | - | | [`inferenceGatew… Configuration implementation Claude Documentation · in the page third-party/claude-desktop/configuration-format …nceModels`, `inferenceGatewayOidc`, `managedMcpServers`, `coworkEgressAllowedHosts`, and `otlpHeaders` are single keys whose value is a whole JSON document. The portable encoding is a JSON string, whi… Connect to GitHub Claude Documentation · in the page third-party/claude-desktop/connectors-github …our device-management tool if you need a non-default scope set. **3. Allow the required network hosts** The server and the sign-in flow call GitHub from the device, so in addition to the [base egres… Connect to Microsoft 365 Claude Documentation · in the page third-party/claude-desktop/connectors-m365 …ropic's infrastructure | Tokens acquired and stored on the device | | Allowlisting with Anthropic | Required (two to three business days) | Not needed | | Device egress | `login.microsoftonline.com` a… Connect to Salesforce Claude Documentation · in the page third-party/claude-desktop/connectors-salesforce …anges**. **With MDM or a bootstrap server.** Add this entry to the [`allowedPluginMarketplaces`](https://claude.com/docs/third-party/claude-desktop/configuration#allowedpluginmarketplaces) key of you… User identity and local data Claude Documentation · in the page third-party/claude-desktop/data-storage …d or updated) * **Review and delete notes**: where your configuration allows Cowork and the device can run it, users go to **Settings > General** and scroll to the **Memory** heading. Users can review… Sign in through the OS identity broker Claude Documentation · in the page third-party/claude-desktop/entra-broker …ermissions the feature itself needs. Under **Authentication**, set **Allow public client flows** to **Yes**. The control is on the **Settings** tab under **Web and SPA settings** (on older versions o… MCP, plugins, skills, and hooks Claude Documentation · in the page third-party/claude-desktop/extensions …ly, can't be removed by the user, and support per-tool policy locks (`allow` / `ask` / `blocked`). The same key also activates the servers bundled inside the app (Microsoft 365, web search, and GitHub…