Access and cache
Admin › Access is a read-only answer to “who can do what”: everyone holding ContextWorks Admin, every domain manager with the domains they manage, and any domain assignment that grants nothing yet. Clear Cache sits in the rail below it.
Read the access overview
- Admins hold the ContextWorks Admin permission set. What the app actually checks is the ContextManageAll custom permission that this permission set carries, so anyone granted that permission another way administers ContextWorks without appearing here.
- Domain managers hold ContextWorks Domain Manager, listed with the domains they manage. A manager with no domain yet shows none, and the permission set gives them nothing until they hold one.
- On a domain, without a permission set lists anyone a domain grants who holds neither permission set. That grant does nothing for them until you assign ContextWorks Domain Manager in Setup — or take them off the domain instead.
A banner appears when delegated administration is off. While it’s off, ContextWorks Domain Manager gives nobody anything — turn it back on under Admin › Governance.
Check that domain scoping is in force
The page reports three things you cannot see anywhere else:
| It says | Meaning |
|---|---|
| Domain scoping is in force | The Domain object is Private. Users read the domains shared to them |
| Domain scoping is NOT in force | The Domain object is Public Read/Write, so every user holds every domain. Fix it in Setup → Sharing Settings |
| Owned by users with a role | Those domains can be inherited through the role hierarchy without being granted. Reassign the owner, or clear Grant Access Using Hierarchies |
The page also names every entity that no domain carries. Those reach nobody: add each one to a domain, or leave it out on purpose. → Sharing setup
Change access
This page changes nothing. Grant or revoke the permission sets in Setup.
To give someone a domain, open it on the Domains page in the Studio tab and use its Access tab. Users sets whose agents see the domain; Managers sets who can change what it carries.
Consumers — the people calling the actions through an agent or MCP — hold ContextWorks User and are not listed here. See Domain access.
Clear the cache
Click Clear Cache in the rail and confirm. Settings, resolved field lists, and currency rates all rebuild on the next request, and no configuration changes. Use it when a change doesn’t seem to be taking effect. Every save already clears the caches it affects, so you should rarely need this.