> For the complete documentation index, see [llms.txt](https://docs.cipp.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cipp.app/user-documentation/cipp/settings.md). # Application Settings The General tab of the application settings brings together the instance-wide controls for your CIPP deployment: version information, password generation, DNS resolution, caching, backups, retention periods, and JIT admin limits. Each card operates independently and saves on its own, so there is no single submit action for the page. ## Version Shows the versions currently running, with the frontend and backend reported separately, together with how this instance is hosted. | Field | Description | | --------------- | ------------------------------------------------------------------------------------------------------------------------------ | | Frontend | The version of the CIPP web interface currently deployed. | | Backend | The version of the CIPP API currently deployed. | | Hosting | Whether this is a CyberDrain-hosted instance or a self-hosted one. | | App Service SKU | The App Service plan the instance runs on, where the platform reports one. | | Runtime Stack | The platform the API runs on: Flex Consumption, Linux, or Windows. | | Last Updated | The most recent version change recorded for this instance, as the version it moved from and to, with the date and time in UTC. | Each version displays a tick when it is current, or a warning icon together with the newer version number when an update is available. Selecting **Check For Updates** re-queries both, which is worth doing after an upgrade rather than relying on a cached result. Selecting **Copy for Ticket** copies the whole card to your clipboard as plain text, ready to paste into a support ticket. The button reads **Copied!** for a couple of seconds to confirm. Version changes are recorded from the next update onward, so a freshly deployed instance shows **No update recorded yet** against Last Updated until it has moved between versions at least once. The full record is on the [Status & Updates](/user-documentation/cipp/advanced/container-management/status.md) page. Any detail the instance cannot report is shown as **Unknown**. The version numbers themselves fall back to Unknown when the check against the published release cannot reach GitHub, for example when the request has been rate-limited, so the rest of the card still gives you something to send with a ticket. {% hint style="info" %} The frontend and backend are versioned and deployed separately, so it is normal to see one flagged as out of date while the other is current during an upgrade. Both should match once the upgrade completes. {% endhint %} ## Password Style Shows the password generation settings currently in effect, displayed as a chip summarising the type and length. | Type | Description | | ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Classic | A randomised string of letters, numbers and symbols, sized by character count. The default is 14 characters. | | Passphrase | Several random words joined by a separator, sized by word count. The default is 4 words. Passphrases are usually easier for end users to read out and retype. | Selecting **Configure** opens the [Password Configuration](/user-documentation/cipp/settings/password-config.md) page, where the type, length, character sets and separator are set. {% hint style="warning" %} If the card shows an error instead of the current setting, CIPP could not read the stored configuration. Open the configuration page and save the settings again to restore it. {% endhint %} ## DNS Resolver Selects which public resolver CIPP uses, with Google and Cloudflare available. The active choice is shown as the filled button. {% hint style="info" %} This resolver is used by the [Domains Analyser](/user-documentation/tenant/standards/domains-analyser.md) and the [Individual Domain Check](/user-documentation/tools/tenant-tools/individual-domains.md) only. It has no effect on any other DNS resolution CIPP performs, so changing it will not alter behaviour elsewhere in the application. {% endhint %} ## Cache Clears the cached data CIPP holds, including the tenant list and analyser results. Selecting **Clear Cache** opens a confirmation dialog with one option. | Setting | Description | | --------------------------- | --------------------------------------------------------------------------------------------------------------- | | Only Clear the Tenant Cache | Limits the operation to the tenant cache, leaving other cached data intact. Leave this off to clear everything. | {% hint style="danger" %} A full cache clear removes every cache table, including audit log entries that are queued but not yet processed. Those entries are lost, not reprocessed. Performance is also degraded until the caches rebuild, and personal preferences such as the selected theme are reset. Only clear the cache when support asks you to. {% endhint %} ## Backup Covers the system configuration backups for your CIPP instance. Selecting **Manage Backups** opens the CIPP Backup page, where backups are taken, restored, and put on an automated daily schedule. {% hint style="info" %} System backups exclude authentication information and extension configuration, so a restored instance still needs its SAM credentials and integration settings entered again. {% endhint %} ## Backup Retention Sets how long backup files are kept before automatic deletion. The value applies to both CIPP system backups and tenant backups. | Field | Description | | ----- | -------------------------------------------------------------------------------------------------- | | Days | The retention period in days. The minimum is 7 and the default is 30. Values below 7 are rejected. | Enter the number of days and select **Save**. Cleanup runs daily at 2:00 AM. ## Log Retention Sets how long CIPP log entries are kept before automatic deletion. | Field | Description | | ----- | ---------------------------------------------------------------------------------------------------------------------------------- | | Days | The retention period in days. The minimum is 7, the maximum is 365, and the default is 90. Values outside that range are rejected. | Enter the number of days and select **Save**. ## JIT Admin Settings Caps how long a Just-In-Time admin account created through CIPP may remain active, which stops technicians from provisioning long-lived privileged accounts. | Field | Description | | --------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Maximum Duration (ISO 8601) | The longest duration a JIT admin account may be granted. Presets range from 1 hour to 30 days, and a custom ISO 8601 duration such as `PT6H` or `P21D` can be typed directly. Leave empty for no limit. | Select **Save Settings** to apply. The limit applies globally across all tenants, and any attempt to create a JIT admin account exceeding it is rejected. {% hint style="info" %} Custom values must be valid ISO 8601 durations, so use forms such as `PT1H`, `P1D` or `P28D`. An invalid value prevents the card from saving. {% endhint %} ## Other Settings Tabs The remaining application settings are grouped on their own tabs. | Tab | Description | | ----------------------------------------------------------------------------- | -------------------------------------------------------------------------------- | | [Branding](/user-documentation/cipp/settings/branding.md) | Customises the logo and brand colour applied to generated reports and documents. | | [Permissions](/user-documentation/cipp/settings/permissions.md) | Reviews and repairs the permissions held by the CIPP service principal. | | [Tenants](/user-documentation/cipp/settings/tenants.md) | Manages which tenants CIPP sees, including exclusions and refresh. | | [Backend](/user-documentation/cipp/settings/backend.md) | Provides direct links into the underlying Azure resources for your instance. | | [Notifications](/user-documentation/cipp/settings/notifications.md) | Configures where CIPP sends alerts, including email and webhook destinations. | | [Automated Onboarding](/user-documentation/cipp/settings/partner-webhooks.md) | Sets up partner webhooks so new tenants are onboarded automatically. | | [Licenses](/user-documentation/cipp/settings/licenses.md) | Manages licence exclusions used across reporting and alerting. | | [Features](/user-documentation/cipp/settings/features.md) | Enables and disables optional CIPP features. | | [SIEM](/user-documentation/cipp/settings/siem.md) | Configures log forwarding to an external SIEM. | *** ## Feature Requests / Ideas We value your feedback and ideas. Please raise any [feature requests](https://github.com/CyberDrain/CIPP/issues/new?template=feature.yml) on GitHub. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.cipp.app/user-documentation/cipp/settings.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.