Policies

The Policies section of Settings → Administration holds switches that apply to everyone on the server. Only the first user sees it.

Enable/Disable SignupCopy Anchor Link

1. Go to Settings
2. Open the Administration page (visible only to the first user)
3. Use the Allow sign-up toggle under Policies
4. Changes apply immediately

When enabled: Anyone can create an account. First user to sign up becomes admin.

When disabled: Nobody can create an account. Account owners can still add sub-users.

Hide File ExtensionsCopy Anchor Link

1. Go to Settings
2. Open the Administration page (visible only to the first user)
3. Use the Hide file extensions toggle under Policies
4. Changes apply immediately for all users

When on: File names in the file manager and in the rename dialog are shown without extensions.

When off: File names show with extensions (default).

Password ChangeCopy Anchor Link

1. Go to Settings
2. Open the Administration page (visible only to the first user)
3. Use the Allow password changes toggle under Policies
4. Changes apply immediately for all users

When on: Users see a Change password option in Settings → Security and can change their password. Password changes log out all sessions and require login again.

When off: The change password option is replaced by a note that password changes are turned off, and /api/change-password returns 403 for all users.

Desktop App Only AccessCopy Anchor Link

1. Open the Desktop app
2. Go to Settings
3. Open the Administration page (visible only to the first user)
4. Use the Desktop app only toggle under Policies
5. Changes apply immediately for all users

When on: The main app only accepts requests from the desktop app. Only Share links (/s/*), /health, /metrics, and the OnlyOffice file and callback endpoints stay available.

When off: Browsers and the desktop app can both access the main app (default)

Cloud Drive Save-onlyCopy Anchor Link

1. Go to Settings
2. Open the Administration page (visible only to the first user)
3. Use the Cloud Drive save-only toggle under Policies
4. Mounted drives apply the change within a minute

When on: The Cloud Drive can be browsed and saved into, but other apps cannot open or copy files from it (default).

When off: Other apps can open and copy files from the drive.

First UserCopy Anchor Link

• The first user to sign up is the administrator
• Only this user sees the Administration page and the signup toggle
• First user ID is stored in app_settings.first_user_id and is immutable
• Admin status is enforced on the server; the client cannot override it

Use CasesCopy Anchor Link

• Public: Enable signup for self-registration; monitor users in Settings → Administration → Registered users
• Private: Disable sign-up after creating your account; add people as sub-users

Related TopicsCopy Anchor Link

• User Management - Manage users
• First Login - Create first account
• Authentication - Authentication system