* [](https://n9e.github.io/index.md)
* Users, teams and security

# Users, teams and security

Who can see and change what, and how to harden a deployment that faces more than one team.

## [Users and teams](https://n9e.github.io/docs/security/users-teams.md)

[Create users, group them into teams, and use teams as notification recipients.](https://n9e.github.io/docs/security/users-teams.md)

## [Contact methods](https://n9e.github.io/docs/security/contacts.md)

[Define the contact fields users can fill in, and how a media type picks one of them to decide where each person's notification goes.](https://n9e.github.io/docs/security/contacts.md)

## [Roles and permission matrix](https://n9e.github.io/docs/security/roles.md)

[Built-in roles, custom roles, and which menu and API operations each grants.](https://n9e.github.io/docs/security/roles.md)

## [Business group authorization](https://n9e.github.io/docs/security/business-groups.md)

[Add teams to a business group with read or write rights, and see the effect on rules and targets.](https://n9e.github.io/docs/security/business-groups.md)

## [Tokens and credential rotation](https://n9e.github.io/docs/security/tokens.md)

[Personal tokens, service accounts for MCP and the API, and rotating them without downtime.](https://n9e.github.io/docs/security/tokens.md)

## [SSO / external identity integration](https://n9e.github.io/docs/security/sso.md)

[OIDC, OAuth2, LDAP, CAS, DingTalk and Feishu login, and mapping external groups to roles.](https://n9e.github.io/docs/security/sso.md)

## [Site and user variable settings](https://n9e.github.io/docs/security/variables.md)

[Site-wide settings and encrypted variables that templates and integrations can reference.](https://n9e.github.io/docs/security/variables.md)

## [Network and TLS hardening](https://n9e.github.io/docs/security/network-tls.md)

[Terminate TLS, restrict the write endpoints, and which ports must not face the internet.](https://n9e.github.io/docs/security/network-tls.md)

## [Secret management](https://n9e.github.io/docs/security/secrets.md)

[Keep database passwords, channel tokens and LLM keys out of config files.](https://n9e.github.io/docs/security/secrets.md)

## [Security checklist](https://n9e.github.io/docs/security/checklist.md)

[The short list to run before exposing Nightingale to a wider audience.](https://n9e.github.io/docs/security/checklist.md)

[Previous](https://n9e.github.io/docs/ai/troubleshooting.md)

[AI / Skill / MCP troubleshooting](https://n9e.github.io/docs/ai/troubleshooting.md)

[Next](https://n9e.github.io/docs/security/users-teams.md)

[Users and teams](https://n9e.github.io/docs/security/users-teams.md)

© 2026 Nightingale Contributors · Apache-2.0 License

[English](https://n9e.github.io/docs/security.md)[简体中文](https://n9e.github.io/zh/docs/security)