The Admin's Cowork Console

Five tiers, and the one holding-company question that picks between them: do you need SSO, audit logs, and a private plugin marketplace, or don't you? · ~2 min

Connect your IdP, capture your domains, pick JIT or SCIM, and test the enforcement toggle with a non-admin account before you flip it — the lock-yourself-out failure mode is real. · ~3 min

Cross-conversation Memory is on by default — and the right setting depends on your regulatory posture, with the wrong call hard to reverse without complaints. · ~3 min

A private GitHub repo, four kinds of distribution preference, and group overrides — together they give each subsidiary exactly the plugin set its work demands. · ~4 min

The audit logs, APIs, and GDPR + EU AI Act + data-residency answers every EU subsidiary's lawyer will eventually request. · ~3 min

Cowork Foundations ends here — for end-users at chapter 5, for you at chapter 6, with the admin console fully configured. · ~1 min