# Administrator Guide

This guide is intended for Enterprise Administrators who manage Treasure AI Voice deployments across their organization. It covers authentication, device management, user management, and security features.

## Web Admin Dashboard

The Web Admin Dashboard provides centralized management of your organization's Treasure AI Voice deployment.

| Region | URL |
|  --- | --- |
| **Japan (AP01)** | [ci-dashboard.ap01.treasure.ai](https://ci-dashboard.ap01.treasure.ai/) |


### Dashboard Menu

- [**Devices**](#devices) — View and manage all PLAUD devices and their assigned users.
- [**Recordings**](#recordings) — Browse, review, and delete recordings.
- [**Audit Logs**](#audit-logs) — View a complete audit trail of all activity.
- [**Members**](#members) — Manage users — invite, remove, and assign roles.
- [**AI Lens**](#ai-lens) — AI-powered analytics and insights.
- [**Security**](#security) — Configure IP allowlists and network security policies.
- [**Legal**](#legal) — Access Treasure Data's Terms of Service, privacy statement, and other legal documents.


## Authentication

Treasure AI Voice supports two authentication methods:

| Method | Description |
|  --- | --- |
| **Sign in with Google** | Authenticate using your organization's Google Workspace account. |
| **Email / Password** | Sign in with credentials provided by your administrator. |


## Devices

The Devices page (also called **Device Fleet**) provides a real-time overview of all PLAUD devices deployed across your organization.

### Fleet Summary

At the top of the page, summary cards display:

- **Total Devices**: Total number of devices registered to your organization.
- **Active**: Devices that are currently active and operational.
- **Locked**: Devices that have been remotely locked by an administrator.
- **Low Battery**: Devices reporting low battery levels.


### Device List

Devices are grouped by assigned user (name and email). Each device row displays:

| Column | Description |
|  --- | --- |
| **Serial** | The unique serial number of the device. |
| **Battery** | Current battery level percentage, or "Unreachable" if the device has not synced recently. |
| **Last Sync** | How long ago the device last synced with the mobile app. |
| **Firmware** | The firmware version currently installed on the device. |
| **Status** | Current device status (Active, Locked). |
| **Actions** | Lock or unlock the device remotely. |


### Locking a Device

If a device is lost or stolen, you can remotely lock it:

1. Navigate to **Devices**.
2. Locate the device by serial number or assigned user.
3. Click the **Lock** button in the Actions column.
4. The device status will change to **Locked**. The action is recorded in the audit log.


## Recordings

The Recordings page displays all transcriptions from organization members.

Use the search bar to find recordings by user email or name. Each recording row displays:

| Column | Description |
|  --- | --- |
| **Meeting** | Recording title and a preview of the transcription content. Click the play button to listen. |
| **User** | Name and email of the user who created the recording. |
| **Device** | Serial number of the PLAUD device used for the recording. |
| **Duration** | Length of the recording. |
| **Recorded** | Date and time the recording was captured. |
| **Status** | Processing status (e.g., Completed). |
| **Actions** | Delete the recording. |


## Audit Logs

The Audit Logs page provides a complete audit trail of all activity on the platform. Logs are retained for **7 years**.

Each log entry displays:

| Column | Description |
|  --- | --- |
| **Device Serial** | Serial number of the related device (if applicable). |
| **Event Type** | Type of event — e.g., User Login, Device Bound, Device Unbound. |
| **Details** | Additional context for the event (if available). |
| **Actor** | Email address of the user who performed the action. |
| **Timestamp** | When the event occurred. |


## Members

The Members page allows you to manage users and team assignments.

### Member List

| Column | Description |
|  --- | --- |
| **Name** | Display name of the user. |
| **Email** | User's email address. |
| **Role** | User role — Regular User or Enterprise Admin. |
| **Status** | Account status (Active). |
| **Last Login** | Date of the user's most recent login. |
| **Actions** | Delete the user (available for Regular Users). |


### Inviting Users

1. Click the **Invite User** button in the top-right corner.
2. Enter the user's email address.
3. Assign a role (Regular User or Enterprise Admin).
4. Copy the invite link displayed in the dashboard and share it with the user directly (for example, via email or messaging).


### Roles

| Role | Permissions |
|  --- | --- |
| **Regular User** | Can access only their own recordings and transcripts. |
| **Enterprise Admin** | Full organizational access — manage devices, members, recordings, security settings, and audit logs via the Web Admin Dashboard. |


Note
Enterprise Admin accounts cannot be deleted from the Members page.

## AI Lens

AI Lens allows administrators to ask natural language questions about their organization's meeting data, devices, and activity.

Type a question in the text field — for example, "What were the key decisions from last week?" — and click **Ask AI**. AI Lens analyzes your organization's recordings and returns an executive summary with insights.

The analysis scope is displayed below the search field (e.g., "Analyzed: 75 recordings, 11 users, 15 devices, 500 events (last 30 days)").

Click **Configure** in the top-right corner to adjust analysis settings.

## Security

Preview
The Security page is rolling out progressively and may not yet be visible in your organization's dashboard. If you'd like early access, please contact your Treasure Data representative.

The Security page allows administrators to configure network security policies.

### IP Allowlist

When enabled, only requests from listed IP ranges can access the application.

1. Navigate to **Security** in the sidebar.
2. Toggle the **IP Allowlist** switch to enable it.
3. Enter an IP address or CIDR range (e.g., `10.0.0.0/8`) and a label (e.g., "Tokyo HQ").
4. Click **+ Add** to add the entry.
5. Click **Save** to apply the changes.


Caution
Ensure your current IP address is included in the allowlist before enabling this feature, or you may lock yourself out of the dashboard.

For detailed information on security certifications, compliance standards, and data protection practices, visit the [Trust Center](https://trust.treasuredata.com/).

## Legal

The Legal page provides direct links to Treasure Data's legal documents that govern the use of Treasure AI Voice:

- **Terms of Service**
- **Voice Supplemental Terms**
- **AI Terms**
- **AI Acceptable Use Policy**
- **Privacy Statement**


Each link opens the current version of the document on the Treasure Data website.