---
title: Tenant settings
description: Administrators can configure tenant-wide settings from the admin console.
component: privilege
page_id: privilege:privileged-access-management:admin-tasks/getting-started/tenant-settings
canonical_url: https://docs.pingidentity.com/privilege/privileged-access-management/admin-tasks/getting-started/tenant-settings.html
revdate: February 16, 2026
---

# Tenant settings

Administrators can configure tenant-wide settings from the admin console. To access these settings, select your user profile from the upper-right corner of the navigation bar, then click **Settings**.

The following settings are available:

| Setting                     | Description                                                                                                                                                                                                                   |
| --------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Tenant Name**             | Displays the name assigned to the tenant during the sign-up process. This name is read-only.                                                                                                                                  |
| **Session Logging**         | Enable to record all SSH and database sessions. Review session logs on the **Activity > Session Logs** page.                                                                                                                  |
| **VPN Interop Mode**        | Enable if your enterprise uses a VPN for network access. The PingOne Privilege agent is compatible with common VPN providers, including Cisco AnyConnect, Zscaler Private Access (ZPA, Palo Alto GlobalProtect, and Fortinet. |
| **Inline Mode**             | Enable if your enterprise doesn't use a VPN. This mode routes all Amazon Web Services (AWS), Google Cloud Platform (GCP), and Azure traffic through the private gateways deployed in your PingOne Privilege account.          |
| **Private Proxy Only Mode** | When enabled, this option forces all user connections through your tenant's private gateways, preventing any connection to the PingOne Privilege public proxy infrastructure.                                                 |
| **Manage Admins**           | Allows you to grant or revoke the tenant administrator roles for users.                                                                                                                                                       |
| **API Keys for Developers** | Generate and manage API keys and secrets. Credentials are useful for automating platform management through the PingOne Privilege API endpoints.                                                                              |