43page. Existing Cursor users on your team get an email with a download link. New43page. Existing Cursor users on your team get an email with a download link. New
44users get an invitation to your Cursor team, by email or invite link, that also44users get an invitation to your Cursor team, by email or invite link, that also
45points them to Grok Bot. Teams that manage membership through SCIM see only the45points them to Grok Bot. Teams that manage membership through SCIM see only the
46existing-users option. To install the apps on member devices with your own46existing-users option.
47device management tools, see47
48To install the desktop app on managed devices yourself and plan updates, see
48[Deploy Grok Bot to your organization](/grok-bot/deployment).49[Deploy Grok Bot to your organization](/grok-bot/deployment).
49 50
50## Before you roll out51## Before you roll out
83 an independent review model called Auto Review.84 an independent review model called Auto Review.
84* Administrative control. Team admins can set Team Rules, Cloud Agent85* Administrative control. Team admins can set Team Rules, Cloud Agent
85 delegation, template sharing, and the local execution ceiling. Network86 delegation, template sharing, and the local execution ceiling. Network
86 Controls, Team Setup, Team Secrets, Allow Local Egress Routing, Allow Sudo on87 Controls, Team Setup Scripts, Team Secrets, Allow Local Egress Routing, Allow
87 Bot Computers, Action Recording, Enforce Auto-review, Auto-review rules, and88 Sudo on Bot Computers, Action Recording, Enforce Auto-review, Auto-review
88 the organization-wide enable switch are Enterprise only.89 rules, and the organization-wide enable switch are Enterprise only.
89 90
90The pieces fit together like this:91The pieces fit together like this:
91 92
98 page of the [Cursor dashboard](https://cursor.com/dashboard/bot). Team99 page of the [Cursor dashboard](https://cursor.com/dashboard/bot). Team
99 Rules, Cloud Agent delegation, public template sharing, and Execution on100 Rules, Cloud Agent delegation, public template sharing, and Execution on
100 Local Computer are available to team admins. Enterprise only on that page:101 Local Computer are available to team admins. Enterprise only on that page:
101 the organization-wide enable switch, Network Controls, Team Setup, Team102 the organization-wide enable switch, Network Controls, Team Setup Scripts,
102 Secrets, Allow Local Egress Routing, Allow Sudo on Bot Computers, Action103 Team Secrets, Allow Local Egress Routing, Allow Sudo on Bot Computers,
103 Recording, Enforce Auto-review, Auto-review rules, and computer management104 Action Recording, Enforce Auto-review, Auto-review rules, and computer
104 for organization admins. Members never see this page.105 management. Members never see this page.
1053. The Bot. Shell, browser, and computer use inside the hosted computer. A Bot1063. The Bot. Shell, browser, and computer use inside the hosted computer. A Bot
106 has no access by default and acts only with accounts the member signs it107 has no access by default and acts only with accounts the member signs it
107 into. It hands login, two-factor authentication, and payment steps to the108 into. It fills logins and cards from the member's Vault, a connected
108 member.109 password manager, or a Secure Form without seeing the values, and hands
1094. Connected apps. Your team's Cursor MCP (Model Context Protocol) policy applies in110 steps such as single sign-on and passkeys to the member.
110 full, allowing or blocking each connector. OAuth tokens stay on Cursor's1114. Connected apps. Your team's Cursor MCP (Model Context Protocol) policy
111 connector backend, and Bots invoke tools without receiving them.112 applies in full, allowing or blocking each connector. OAuth tokens stay on
113 Cursor's connector backend, and Bots invoke tools without receiving them.
1125. Cloud Agents. Grok Bot can delegate coding tasks to separate computers under1145. Cloud Agents. Grok Bot can delegate coding tasks to separate computers under
113 your existing [Cloud Agent](https://cursor.com/docs/cloud-agent) controls.115 your existing [Cloud Agent](https://cursor.com/docs/cloud-agent) controls.
114 Admins can disable spawning.116 Admins can disable spawning.
129temporary files when work completes. When a workload needs its own computer and131temporary files when work completes. When a workload needs its own computer and
130credential set, give it its own Cursor user.132credential set, give it its own Cursor user.
131 133
132[Team Bots](/grok-bot/team-bots) are the exception to one Bot per user. A134[Shared Bots](/grok-bot/shared-bots) are the exception to one Bot per user. A
133member shares a cloud-hosted Bot with everyone on the team, or only with135Bot is either personal or shared: a member shares a cloud-hosted Bot with
134certain people and groups, and those members can chat with it. Each member's136everyone on the team, or only with certain people and groups, and those members
135chat is private, including from the owner and the Bot's Managers. In a member's137can chat with it. Each member's chat is private, including from the owner and
136own chat or Slack DM, the Bot usually works on that member's computer, uses138the Bot's Managers. In a member's own chat or Slack DM, the Bot usually works
137that member's connected accounts after asking, and uses that member's Grok Bot139on that member's computer, uses that member's connected accounts after asking,
138usage. In Slack channels, threads, group DMs, and group chats, a Team Bot uses140and uses that member's Grok Bot usage. In Slack channels, threads, group DMs,
139one computer of its own. Secrets, apps, and files the owner or a Manager adds141and group chats, a shared Bot uses one computer of its own. Secrets, apps, and
140to a Team Bot are available in every teammate's chat.142files the owner or a Manager adds to a shared Bot are available in every
143teammate's chat.
141 144
142## Admin controls145## Admin controls
143 146
159The organization-wide switch on the Grok Bot page, with **Manage Group Access**162The organization-wide switch on the Grok Bot page, with **Manage Group Access**
160beside it. Turning it on opens a setup modal that covers privacy mode, billing,163beside it. Turning it on opens a setup modal that covers privacy mode, billing,
161and model availability, offers to turn on Cloud Agents when they are off, and164and model availability, offers to turn on Cloud Agents when they are off, and
162asks you to accept the Grok Bot Terms. Turning it off blocks every member without deleting165asks you to accept the Grok Bot Terms. Turning it off blocks every member
163their computers. See166without deleting their computers. See
164[Enabling Grok Bot for your team](#enabling-grok-bot-for-your-team).167[Enabling Grok Bot for your team](#enabling-grok-bot-for-your-team).
165 168
166Available on the Enterprise plan.169Available on the Enterprise plan.
176 179
177Available on the Enterprise plan.180Available on the Enterprise plan.
178 181
179### Bot Capabilities182#### Team icon
183
184The image Grok Bot shows for your whole team, such as when a member shares a
185Bot with everyone. Admins upload, change, or remove it from the
186**Team Profile** section of Team Settings. Use a PNG, JPEG, or WebP up to 2 MB.
187
188### Agent capabilities
180 189
181What Bots may do on behalf of members. Each control applies to every member's190What Bots may do on behalf of members. Each control applies to every member's
182Bots.191Bots.
189on separate computers under your existing Cloud Agent controls. Turn it off198on separate computers under your existing Cloud Agent controls. Turn it off
190when your team does not need delegation.199when your team does not need delegation.
191 200
201#### Public template sharing
202
203Controls whether members can publish Bot templates outside your team. Off keeps
204sharing team-only, and Cursor enforces the policy on its servers, including for
205templates that are already public. Enterprise teams start with public sharing
206off; other teams start with it allowed. For what a shared template contains,
207see [Share a Bot](/grok-bot/bots#share-a-bot).
208
209#### Manage Shared Bots
210
211Controls who can use each [shared Bot](/grok-bot/shared-bots) and adds shared
212Bots to members' sidebars automatically. Open **Manage Shared Bots** under
213**Shared Bots** on the Grok Bot page. The **Access** column shows who can use
214each shared Bot, such as the whole team, certain people or groups, or only its
215owner. Click it to change who has access. In a Bot's **Auto-add** column, pick
216**All team** or one or more groups, or clear it. Auto-add only applies to
217groups that have access. Members who get a Bot this way cannot hide it from
218their sidebar. Admins can also delete a shared Bot here. Deleting it removes it
219for everyone on the team, removes its Slack app, and cannot be undone. Groups
220are managed on the Members & Groups page.
221
222#### Page sharing
223
224Controls how members can share [Pages](/grok-bot/files-and-results#pages)
225inside your team. Find **Page sharing** under **Sharing** on the Grok Bot page
226and pick **Anyone on the team**, **Specific teammates**, or **Off**.
227**Anyone on the team** is the default. Pages already shared stay shared when you
228tighten it. The control appears as Pages reach your team.
229
192#### Agent Email230#### Agent Email
193 231
194Lets members claim a `mail.grokbot.com` address that their Bots can read and232Lets members claim a `mail.grokbot.com` address that their Bots can read and
195send mail from. The switch is under **Bot Capabilities** on the Grok Bot page233send mail from. The switch is under **Bot Capabilities** on the Grok Bot page
196and is off by default, and members get no email tools until it is on. Every234and is off by default; members get no email tools until it is on. When a member
197outbound email waits as a draft until the member presses **Send**, including235asks for an email in chat, it sends once Auto-review allows it or the member
198mail from routines and replies. Newsletters and first-contact emails include an236approves it. Email the Bot writes on its own, including from routines, waits as
199unsubscribe link, and incoming mail acts only through routines the member sets237a draft until the member presses **Send**. Newsletters and first-contact emails
200up. If you turn it off later, Bots lose their email tools and email routines238include an unsubscribe link, and incoming mail acts only through routines the
201stop; existing addresses keep receiving mail. See239member sets up. Turning it off removes the Bots' email tools and stops email
240routines; existing addresses keep receiving mail. See
202[Give your Bot an email address](https://cursor.com/help/grok-bot/agent-email).241[Give your Bot an email address](https://cursor.com/help/grok-bot/agent-email).
203 242
204#### Public template sharing
205
206Controls whether members can publish Bot templates outside your team. Off
207keeps sharing team-only, and Cursor enforces the policy on its servers,
208including for templates that are already public. Enterprise teams start with
209public sharing off; other teams start with it allowed. For what a shared
210template contains, see [Share a Bot](/grok-bot/bots#share-a-bot).
211
212#### Manage Team Bots
213
214Controls who can use each [Team Bot](/grok-bot/team-bots) and adds Team Bots
215to members' sidebars automatically. Open **Manage Team Bots** under **Team
216Bots** on the Grok Bot page. The **Access** column shows who can use each Team
217Bot, such as the whole team, certain people or groups, or only its owner. Click
218it to change who has access. In a Team Bot's **Auto-add** column, pick **All
219team** or one or more groups, or clear it. Auto-add only applies to groups that
220have access. Members who get a Bot this way cannot hide it from their sidebar.
221Admins can also delete a Team Bot here. Deleting it removes it for everyone on
222the team, removes its Slack app, and cannot be undone. Groups are managed on
223the Members & Groups page.
224
225#### Connector policy243#### Connector policy
226 244
227Grok Bot inherits your team's Cursor connector policy. There is no separate245Grok Bot inherits your team's Cursor connector policy. There is no separate
228Grok Bot connector list, and members find permitted connectors under **Connect246Grok Bot connector list, and members find permitted connectors under **Connect
229apps** in Grok Bot. Set which247apps** in Grok Bot. Set which servers members can use from your Team
230servers members can use from your Team Marketplace on the dashboard's248Marketplace on the dashboard's
231[Plugins & MCPs page](https://cursor.com/dashboard/plugins), not on the Grok249[Plugins & MCPs page](https://cursor.com/dashboard/plugins), not on the Grok
232Bot page. The MCP allowlist is Enterprise only; see250Bot page. The MCP allowlist is Enterprise only; see
233[MCP server trust management](https://cursor.com/docs/enterprise/model-and-integration-management#mcp-server-trust-management).251[MCP server trust management](https://cursor.com/docs/enterprise/model-and-integration-management#mcp-server-trust-management).
254 272
255Let members route Grok Bot's web traffic through their own computer. Off273Let members route Grok Bot's web traffic through their own computer. Off
256disables the option in Grok Bot. The switch is under **Bot Computers** on the274disables the option in Grok Bot. The switch is under **Bot Computers** on the
257Grok Bot page and is on by default. Turning it off275Grok Bot page and is on by default. Turning it off stops active routes within
258stops active routes within five minutes. Turning it back on restores each276five minutes. Turning it back on restores each member's previous choice. See
259member's previous choice. See
260[Route traffic through your desktop](/grok-bot/settings-and-notifications#route-traffic-through-your-desktop).277[Route traffic through your desktop](/grok-bot/settings-and-notifications#route-traffic-through-your-desktop).
261 278
262Available on the Enterprise plan.279Available on the Enterprise plan.
263 280
264#### Allow Sudo on Bot Computers
265
266Lets Bots run commands as root on their own computer. The switch is on by
267default and sits next to **Allow Local Egress Routing** in the **Bot
268Computers** section of the Grok Bot page. Existing computers must be restarted
269before a change takes effect; see
270[Restart after a settings change](/grok-bot/computers#restart-after-a-settings-change).
271
272Available on the Enterprise plan.
273
274### Rules and approvals281### Rules and approvals
275 282
276Guidance Bots follow, and the review layers that stop actions and model283Guidance Bots follow, and the review layers that stop actions and model
280 287
281Rules that every member's Bots follow. Add them from the Grok Bot page and288Rules that every member's Bots follow. Add them from the Grok Bot page and
282scope each rule to Cursor, Grok Bot, or both. Rules applied to Grok Bot are289scope each rule to Cursor, Grok Bot, or both. Rules applied to Grok Bot are
283always required, so members cannot turn them off. Keep them short and few, like290always required, so members cannot turn them off. Keep them short and few,
284"never move company data to personal accounts." Rules guide a Bot; for approval291like "never move company data to personal accounts." Rules guide a Bot; for
285behavior, use [Auto-review rules](#auto-review-rules). For guidance that292approval behavior, use [Auto-review rules](#auto-review-rules). For guidance
286belongs to one cohort, add Group Rules under [Group settings](#group-settings).293that belongs to one cohort, add Group Rules under
294[Group settings](#group-settings).
287 295
288#### Enforce Auto-review296#### Enforce Auto-review
289 297
290Prevents members from turning Auto-review off. The switch is on the Grok Bot298Prevents members from turning Auto-review off. The switch is on the Grok Bot
291page and is off by default. When it is on, Bots always check risky actions299page and is off by default. When it is on, Bots always check risky actions
292before running them and ask for approval when needed. This includes Team Bots300before running them and ask for approval when needed. This includes shared
293in chats where nobody can answer an approval, which otherwise run without301Bots in chats where nobody can answer an approval, which otherwise run without
294Auto-review. Turn it on before you302Auto-review. Turn it on before you rely on team Auto-review rules. A group can
295rely on team Auto-review rules. A group can lift the lock for its own members303lift the lock for its own members with **Don't enforce for this group**; see
296with **Don't enforce for this group**; see [Group settings](#group-settings).304[Group settings](#group-settings).
297 305
298Available on the Enterprise plan.306Available on the Enterprise plan.
299 307
329 337
330#### Network Controls338#### Network Controls
331 339
332Restricts which destinations team computers can reach. On the dashboard the340Restricts which destinations team computers can reach. Find it under
333section is **Network** and the control is **Grok Bot Network Access**. Pick one341**Network** on the Grok Bot page as **Grok Bot Network Access**. Pick
334of three modes, from allow-all to a team allowlist of domains and IP ranges:342**Allow All Network Access**, **Defaults + Team Allowlist**, or
335**Allow All Network Access**, **Defaults + Team Allowlist**, or **Team343**Team Allowlist Only**, and list domains and IP ranges for the allowlist
336Allowlist Only**. Directory groups can carry their own344modes. Directory groups can carry their own policy, and a lock makes the team
337policy as **Group Network Access**, and **Lock for All Groups** makes the team
338policy apply to everyone. Teams without a policy default to allow-all. See345policy apply to everyone. Teams without a policy default to allow-all. See
339[network policy](/grok-bot/security#network-policy) for the modes and how a346[network policy](/grok-bot/security#network-policy) for the modes and how a
340new policy reaches running computers.347new policy reaches running computers.
344including built-in connectors such as GitHub, X, and Origin, must match an351including built-in connectors such as GitHub, X, and Origin, must match an
345allowed destination by the hosts it sends requests to, and a Bot's connection352allowed destination by the hosts it sends requests to, and a Bot's connection
346to one that does not match is refused. Command servers are unaffected. See353to one that does not match is refused. Command servers are unaffected. See
347[MCP servers and the network policy](/grok-bot/security#mcp-servers-and-the-network-policy).354[MCP servers and the network policy](/grok-bot/security#mcp-servers-and-the-network-policy)
355for the hosts each built-in connector needs.
348 356
349Available on the Enterprise plan.357Available on the Enterprise plan.
350 358
355Computers** on the Grok Bot page. Keep secret values out of setup scripts; when363Computers** on the Grok Bot page. Keep secret values out of setup scripts; when
356a script needs a credential, store it as a [Team Secret](#team-secrets) and364a script needs a credential, store it as a [Team Secret](#team-secrets) and
357read it from the environment. Members do not see these scripts in the app. For365read it from the environment. Members do not see these scripts in the app. For
358how manifests run, and to366how manifests run, and to install a networking client that reaches private
359install a networking client that reaches private services, see367services, see [Connect to private networks](/grok-bot/private-networks). To
360[Connect to private networks](/grok-bot/private-networks). To run extra368run extra scripts on one cohort's computers only, add them under
361scripts on one cohort's computers only, add them under
362[Group settings](#group-settings).369[Group settings](#group-settings).
363 370
364Available on the Enterprise plan.371Available on the Enterprise plan.
397runtime reserves, such as `PATH`, `HOME`, and anything starting with `SAND_`404runtime reserves, such as `PATH`, `HOME`, and anything starting with `SAND_`
398or `LD_`, are rejected when you save. Team Secrets are for scripts you control.405or `LD_`, are rejected when you save. Team Secrets are for scripts you control.
399They do not make a value available to Bots directly, and they are separate from406They do not make a value available to Bots directly, and they are separate from
400the [secrets members store on a Bot](https://cursor.com/help/grok-bot/secrets).407the [secrets members store on a Bot](/grok-bot/vault). They are not available
401They are not available through the Admin API.408through the Admin API.
409
410Available on the Enterprise plan.
411
412#### Allow Sudo on Bot Computers
413
414Lets Bots run commands as root on their own computer. The switch is under
415**Bot Computers** on the Grok Bot page and is on by default. Existing computers
416pick up a change after they restart.
402 417
403Available on the Enterprise plan.418Available on the Enterprise plan.
404 419
405#### Manage Member Computers and Data420#### Manage Member Computers and Data
406 421
407Lets organization admins recreate, terminate, or permanently delete the422Lets admins recreate, terminate, or permanently delete the computers of many
408computers of many members at once, or delete all of their Grok Bot data, with a423members at once, or delete all of their Grok Bot data, with a result for each
409result for each member. Team admin rights are not enough, because one computer424member. Find it under **Security & Compliance** on the Grok Bot page.
410spans every team the member belongs to. Find it under **Security & Compliance**425**Recreate** moves members to the latest image and Team Setup Scripts while
411on the Grok Bot page. **Recreate** moves members to the latest image and Team426keeping their Bots, files, and logins. **Terminate** ends the member's current
412Setup Scripts while keeping their Bots, files, and logins. **Terminate** ends427work and keeps the durable disk; the member's next session starts a fresh
413the member's current work and keeps the durable disk; the member's next session428computer on it. **Delete** removes the computer and its stored files, and the
414starts a fresh computer on it. **Delete** removes the computer and its stored429member's next session starts an empty computer.
415files, and the member's next session starts an empty computer.
416**Terminate Inactive Computers**, under **Bot Computers**, does the terminate430**Terminate Inactive Computers**, under **Bot Computers**, does the terminate
417for you when a computer goes 30 days without use.431for you when a member's Bots go 30 days without a message. It is off by
418It is off by default. None of these remove432default. None of these remove access: to do that, remove the member from the
419access: to do that, remove the member from the team or turn off Grok Bot for433team or turn off Grok Bot for their group, and revoke their sessions in your
420their group, and revoke their sessions in your identity provider. See434identity provider. See [Manage Grok Bot computers](/grok-bot/computers).
421[Manage Grok Bot computers](/grok-bot/computers).
422 435
423Available on the Enterprise plan.436Available on the Enterprise plan.
424 437
438with the title but strip query strings and credentials; computer use sessions451with the title but strip query strings and credentials; computer use sessions
439record action and screenshot counts and the session duration, without the452record action and screenshot counts and the session duration, without the
440screenshots, clicks, or typed text; every other event carries ids, outcomes,453screenshots, clicks, or typed text; every other event carries ids, outcomes,
441and durations. Tool arguments and results, file paths and names, and message454and durations, never tool arguments, file paths, or message content. The
442bodies are never exported on these events; MCP arguments and results ship only
443through the opt-in conversation content export described below. The
444switch is on the Grok Bot page and is off by default. Recorded events do not455switch is on the Grok Bot page and is off by default. Recorded events do not
445appear on the Audit Log page. To receive them in your own collector, configure456appear on the Audit Log page. To receive them in your own collector, configure
446[OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export),457[OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export),
451 462
452Available on the Enterprise plan.463Available on the Enterprise plan.
453 464
454#### Conversation content export
455
456An opt-in addition to OpenTelemetry Export that streams the text of user
457prompts and assistant responses from Grok Bot, and the arguments and results of
458Grok Bot MCP tool calls. It is off by default. In **Team Settings →
459OpenTelemetry Export**, turn on **Allow conversation content export**, then
460turn on **Conversation content** on your destination. That turns on
461**Prompts** and **Responses** and leaves **Tool I/O** off; turn on **Tool I/O**
462to also receive MCP tool arguments and results. Keep Action Recording on as
463well, so every tool I/O record has an MCP tool call record to join to. Turning
464a toggle off stops that export; turning it back on does not backfill earlier
465messages or tool calls.
466
467Tool I/O covers hosted connector calls only: MCP calls Cursor runs, such as
468Jira, Slack, and Linear. `stdio` servers on the Bot's computer and built-in
469tools report no payloads yet.
470
471Cursor scrubs the content before export: known credential shapes, PEM blocks,
472and email addresses become `[REDACTED: ...]` markers. Pattern matching cannot
473recognize every secret or every piece of personal data, and your team owns that
474residual risk. Teams on Privacy Mode (Legacy) cannot turn on conversation
475content export. See
476[Conversation content](https://cursor.com/docs/enterprise/opentelemetry-export#conversation-content)
477and [MCP tool I/O](https://cursor.com/docs/enterprise/opentelemetry-export#mcp-tool-io).
478
479Available on the Enterprise plan.
480
481#### Audit logs465#### Audit logs
482 466
483Admin, security, and authentication events, plus Grok Bot control-plane467Admin, security, and authentication events, plus Grok Bot control-plane
494#### OpenTelemetry Export478#### OpenTelemetry Export
495 479
496Streams Cursor usage metrics and logs, including recorded Grok Bot actions, to480Streams Cursor usage metrics and logs, including recorded Grok Bot actions, to
497a collector you run. It is the customer path for Action Recording events and,481a collector you run. It is the customer path for Action Recording events.
498when you opt in, conversation content. Records may include the member's email482Configure it under **Team Settings → OpenTelemetry Export**. Endpoint
499(`cursor.user.email`); it is optional and not exported for teams on Privacy
500Mode (Legacy). Configure it under **Team Settings → OpenTelemetry Export**.
501Endpoint
502requirements and the event schema are on483requirements and the event schema are on
503[OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export).484[OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export).
504 485
509The controls above set the team-wide baseline. To widen that baseline for one490The controls above set the team-wide baseline. To widen that baseline for one
510cohort, open a group your team owns from491cohort, open a group your team owns from
511[Members > Groups](https://cursor.com/dashboard/members?subtab=groups) and use492[Members > Groups](https://cursor.com/dashboard/members?subtab=groups) and use
512its **Grok Bot** tab. Group settings only widen: a group can grant its members493its **Grok Bot** tab. Except for network policy, group settings only widen: a
513more than the team allows, never less, and a member in several groups gets the494group can grant its members more than the team allows, never less, and a
514most permissive result. This is the same rule as495member in several groups gets the most permissive result. This is the same
496rule as
515[group model access](https://cursor.com/docs/enterprise/model-and-integration-management#how-team-and-group-model-access-combine).497[group model access](https://cursor.com/docs/enterprise/model-and-integration-management#how-team-and-group-model-access-combine).
516A group control left at the team's value changes nothing, so tighten controls498A group control left at the team's value changes nothing, so tighten controls
517on the Grok Bot page and widen them per group.499on the Grok Bot page and widen them per group.
518 500
519Network is the exception: a group's network policy replaces the team's for its
520members, whether looser or tighter, **Lock for All Groups** keeps the team
521policy for everyone, and a member of several groups gets the most restrictive
522policy.
523
524The tab has four sections:501The tab has four sections:
525 502
526* **Bot Capabilities.** Allow [Cloud Agents](#cloud-agents),503* **Bot Capabilities.** Allow [Cloud Agents](#cloud-agents),
528 [Allow Local Egress Routing](#allow-local-egress-routing), or raise the505 [Allow Local Egress Routing](#allow-local-egress-routing), or raise the
529 [Execution on Local Computer](#execution-on-local-computer) ceiling, for506 [Execution on Local Computer](#execution-on-local-computer) ceiling, for
530 group members when the team has them off or stricter. For Auto-review,507 group members when the team has them off or stricter. For Auto-review,
531 **Don't enforce for this group**508 **Don't enforce for this group** lifts the team's
532 lifts the team's [Enforce Auto-review](#enforce-auto-review) lock so group509 [Enforce Auto-review](#enforce-auto-review) lock so group members can turn
533 members can turn Auto-review off, and group Auto-review rules combine with510 Auto-review off, and group Auto-review rules combine with the team's
534 the team's [Auto-review rules](#auto-review-rules), with **Ask first**511 [Auto-review rules](#auto-review-rules), with **Ask first** winning when
535 winning when rules conflict.512 rules conflict.
536* **Network.** The group's own network policy, as described under513* **Network.** The group's own network policy, as described under
537 [Network Controls](#network-controls). A locked team policy applies to514 [Network Controls](#network-controls). It replaces the team policy for group
538 everyone. A member of several groups gets the most restrictive one.515 members, whether looser or tighter, and a member of several groups gets the
516 most restrictive one. A locked team policy applies to everyone.
539 **Apply to MCP servers** is set on the team's Grok Bot page only; a group517 **Apply to MCP servers** is set on the team's Grok Bot page only; a group
540 inherits it and cannot turn it off.518 inherits it and cannot turn it off.
541* **Group Rules.** Rules for the group's Bots, combined with519* **Group Rules.** Rules for the group's Bots, combined with
542 [Team Rules](#team-rules). Members cannot turn them off.520 [Team Rules](#team-rules). Members cannot turn them off.
543* **Setup Scripts.** Manifests that run on group members' computers alongside521* **Setup Scripts.** Manifests that run on group members' computers alongside
544 [Team Setup Scripts](#team-setup-scripts). They use the same structure and run the same way,522 [Team Setup Scripts](#team-setup-scripts). They use the same structure and
545 the same no-secrets rule applies, and they read the same523 run the same way, the same no-secrets rule applies, and they read the same
546 [Team Secrets](#team-secrets) as the team's manifests; there are no524 [Team Secrets](#team-secrets) as the team's manifests; there are no
547 group-level secrets. See525 group-level secrets. See
548 [how Team Setup runs your scripts](/grok-bot/private-networks#how-team-setup-runs-your-scripts).526 [how Team Setup runs your scripts](/grok-bot/private-networks#how-team-setup-runs-your-scripts).
560 538
561## Admin API539## Admin API
562 540
563Enable Grok Bot and manage capabilities, Enforce Auto-review, group access,541Enable Grok Bot and manage capabilities, Enforce Auto-Review, group access,
564network policy, team rules, and setup scripts through the542network policy, team rules, and setup scripts through the
565[Admin API](https://cursor.com/docs/account/teams/admin-api#grok-bot).543[Admin API](https://cursor.com/docs/account/teams/admin-api#grok-bot).
566[Team Secrets](#team-secrets) are managed from the dashboard only. To recreate,544[Team Secrets](#team-secrets) are managed from the dashboard only.
567terminate, or delete members' computers, or delete all of their Grok Bot data,545
568from a script, see546To recreate, terminate, or delete members' computers, or delete all of their
569[Run operations through the API](/grok-bot/computers#run-operations-through-the-api).547Grok Bot data, from a script, use the
548[Organization API](https://cursor.com/docs/account/organizations/organization-admin-api#grok-bot-computers).
549It takes an Organization API key with the `admin:*` scope, because one computer
550serves every team a member belongs to.
570 551
571## Security552## Security
572 553
573The security model, network policy, approvals and Auto Review, identity,554The security model, network policy, approvals and Auto Review, identity,
574logging, data handling, and certifications live on555logging, data handling, and certifications live on
575[Grok Bot security](/grok-bot/security). Common review questions are on the556[Grok Bot security](/grok-bot/security). Common review questions are on
576[Grok Bot security FAQ](/grok-bot/security-faq). To have your own AI security557[Grok Bot security FAQ](/grok-bot/security-faq). To have your own AI security
577server check each model request, see558server check each model request, see
578[Grok Bot inference hooks](/grok-bot/inference-hooks).559[Grok Bot inference hooks](/grok-bot/inference-hooks).
588 mode and want it to cover connected apps too, add the hosts your connectors569 mode and want it to cover connected apps too, add the hosts your connectors
589 use (for example `api.github.com`, `api.x.com`, `api.origin.cursor.com`) to570 use (for example `api.github.com`, `api.x.com`, `api.origin.cursor.com`) to
590 the list, then turn on **Apply to MCP servers**; it is off until you do. See571 the list, then turn on **Apply to MCP servers**; it is off until you do. See
591 [MCP servers and the network policy](/grok-bot/security#mcp-servers-and-the-network-policy).572 [Grok Bot security](/grok-bot/security#network-policy).
5922. Audit connector policy in Teams Marketplace before enabling Grok Bot. Any5732. Audit connector policy in Teams Marketplace before enabling Grok Bot. Any
593 permitted connector is available to every Bot a member runs.574 permitted connector is available to every Bot a member runs.
5943. Turn on Enforce Auto-review before you rely on team rules. Enterprise only.5753. Turn on Enforce Auto-review before you rely on team rules. Enterprise only.
637### Can I set a Grok Bot spend cap?618### Can I set a Grok Bot spend cap?
638 619
639A separate Grok Bot spend cap is not available today. Account-level on-demand620A separate Grok Bot spend cap is not available today. Account-level on-demand
640controls apply, and the per-product split is on the621controls apply, and the per-product split is on the dashboard usage page.
641[dashboard usage page](https://cursor.com/dashboard/usage).
642 622
643### Why does a member see an app as Disabled by team admin?623### Why does a member see an app as Disabled by team admin?
644 624
648members with a vendor-side permission error, check the provider's628members with a vendor-side permission error, check the provider's
649requirements; some vendors restrict their MCP endpoints to their own629requirements; some vendors restrict their MCP endpoints to their own
650administrators. See630administrators. See
651[Connect an app](/grok-bot/computer-and-apps#connect-an-app).631[Connect apps](/grok-bot/computer-and-apps#connect-an-app).
652 632
653### How do members request access?633### How do members request access?
654 634
659 639
660### Can I see what kind of work my team does with Grok Bot?640### Can I see what kind of work my team does with Grok Bot?
661 641
662Yes, on all Enterprise teams. The Conversation Insights642Yes, on all Enterprise teams. The Conversation Insights page of the Analytics
663page of the Analytics dashboard has a **Grok Bot** source that groups Bot643dashboard has a **Grok Bot** source that groups Bot conversations by Type of
664conversations by Type of Work and Level of Automation. See644Work and Level of Automation. See
665[Grok Bot Conversation Insights](https://cursor.com/docs/account/teams/analytics#grok-bot-conversation-insights).645[Grok Bot Conversation Insights](https://cursor.com/docs/account/teams/analytics#grok-bot-conversation-insights).
666 646
667Isolation, egress, approvals, logging, and data-handling questions are on the647Isolation, egress, approvals, logging, and data-handling questions are on
668[Grok Bot security FAQ](/grok-bot/security-faq).648[Grok Bot security FAQ](/grok-bot/security-faq).
669 649
670## Related pages650## Related pages
671 651
652* [Deploy Grok Bot to your organization](/grok-bot/deployment)
672* [Grok Bot security](/grok-bot/security)653* [Grok Bot security](/grok-bot/security)
673* [Grok Bot security FAQ](/grok-bot/security-faq)654* [Grok Bot security FAQ](/grok-bot/security-faq)
674* [Grok Bot inference hooks](/grok-bot/inference-hooks)655* [Grok Bot inference hooks](/grok-bot/inference-hooks)
675* [Deploy Grok Bot to your organization](/grok-bot/deployment)
676* [Configure identity and access](/grok-bot/identity-and-access)656* [Configure identity and access](/grok-bot/identity-and-access)
677* [Connect to private networks](/grok-bot/private-networks)657* [Connect to private networks](/grok-bot/private-networks)
678* [Configure TLS-inspecting proxies](/grok-bot/proxies)658* [Configure TLS-inspecting proxies](/grok-bot/proxies)
679* [Manage Grok Bot computers](/grok-bot/computers)659* [Manage Grok Bot computers](/grok-bot/computers)
680* [Create and manage Bots](/grok-bot/bots)660* [Create and manage Bots](/grok-bot/bots)
681* [Team Bots](/grok-bot/team-bots)
682* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)
683* [Admin API](https://cursor.com/docs/account/teams/admin-api#grok-bot)661* [Admin API](https://cursor.com/docs/account/teams/admin-api#grok-bot)
684* [Grok Bot Conversation Insights](https://cursor.com/docs/account/teams/analytics#grok-bot-conversation-insights)662* [Grok Bot Conversation Insights](https://cursor.com/docs/account/teams/analytics#grok-bot-conversation-insights)
685* [Plans and billing](https://cursor.com/help/grok-bot/plans)663* [Plans and billing](https://cursor.com/help/grok-bot/plans)