---
title: Admin controls
description: How a Signal workspace admin decides whether assistants can be used, what they may do, which apps may connect and what they may see.
product: signal
section: mcp
order: 8
---

# Admin controls

Workspace admins control AI assistants in **Settings › Integrations › AI assistants**. Every control here only ever narrows what an assistant may do. None lets anyone do more than their role allows in Signal.

## Workspace access

Only a workspace admin can change it, and it applies to everyone in the workspace:

| Setting | What it means |
|---|---|
| **Off** | No assistant can use this workspace. |
| **View only** | Assistants can look things up but can't make changes. |
| **Full** | Assistants can look things up and make changes, within each person's permissions. |

Switching to **Off** ends assistant access straight away. An assistant that calls afterwards gets `workspace_assistants_off`, and one that tries a change under View only gets `workspace_read_only`.

## Allowed apps

- **All apps**, or **Only these apps**, chosen by name: Claude, ChatGPT, Copilot, Cursor, Gemini, and **Other apps** (any assistant Signal can't name).
- An app that isn't allowed is refused with `client_not_allowed`.

## Privacy preferences

These two preferences apply to every assistant in the workspace:

- **Hide contact details (email and phone) from assistants**
- **Let assistants use call recordings and transcripts** (off by default)

## Members' connections

Admins see who has connected which app, with each connection's access, areas, default workspace and when it was last used. **Disconnect** ends a member's connection, in every workspace, straight away.

Each person can also see and disconnect their own apps under **Your connected apps**.

## AI activity

**Settings › AI activity** lists every change an assistant made in the workspace, with the person, the app it came from, and **Undo** where the change can still be undone (once, within 7 days).

## Pausing

Signal pauses a connection that makes an unusual number of changes or errors. Its calls are refused with `connection_paused` until the person selects **Resume** beside it.