> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloud.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> The Security tab contains security settings that are applied globally.

The security settings on this tab are applied globally.

![Settings security](https://mintcdn.com/cdata/mwCDe1Pif1s7YN37/en/images/settings_security.png?fit=max\&auto=format\&n=mwCDe1Pif1s7YN37\&q=85\&s=cd91d2fadb31e8784dc83503f08213d3)

## Personal Access Token Expiration

This section allows you to set a global Personal Access Token (PAT) expiration (such as **30 Days**, **60 Days**, or **Never Expire**). Shorter durations improve security. When the PAT expires, the PAT displays **Expired** in the **Security** tab of **Settings**, and any authentication using the PAT fails with an `"Invalid personal access token"` error.

To create a PAT, see [Personal Access Tokens](/en/Settings/Personal-Access-Tokens).

## Default Connection & Virtual Schema Permissions

From the drop-down list, select the default permissions granted to new users for all connections and virtual schemas. Options include **No Permissions** to connections and virtual schemas by default or **Select Only** permissions to connections and virtual schemas by default.

> [!NOTE]
>
> This setting does not affect the connection and virtual schema access of existing users.

## Playground Access

Toggle this feature off if you do not want your users to have access to [Playground](/en/Playground).

## MCP Connectivity

Toggle this feature off if you do not want your users to have access to any MCP-related functionality.

## SSO

**Just-in-Time (JIT) User Provisioning** automatically provisions new users the first time they sign in to an SSO-enabled domain.

![Settings SSO](https://mintcdn.com/cdata/BVI_pWskwfkvIuSe/en/images/settings_sso.png?fit=max\&auto=format\&n=BVI_pWskwfkvIuSe\&q=85\&s=b60c22f0afbb495ad9c766a58034d345)

To enable JIT user provisioning:

**Step 1**

Enable the toggle for a domain to turn on JIT provisioning.

**Step 2**

Select the **JIT User Role** for new JIT users.

**Step 3**

Select the **JIT Access Role** for new JIT users.

**Step 4**

Click **Save Changes**.

See [JIT User Provisioning](/en/SCIM/SSO) for more information about JIT. See [Roles](/en/Identities/Roles) for more information about user roles and access roles.

## Context

In the **Context** section, select **Include Sample Values** to include sample data when generating context. Context improves query accuracy and reply times. See [Context Editor](/en/Context-Editor) for more information.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.