Nextcloud’s admin area is extensive — more than 20 sections, many of which you’ll rarely touch. Here’s a tour of what actually matters.
Profile icon top right → Administration settings. You’ll see two columns:
- Personal — your account only
- Administration — server-wide, affects all users
All other users only see the personal part. The administration section is visible to admins only.
Overview
First section at the top — gives you a quick look:
- Update notice for the Nextcloud version
- Number of users
- Storage usage
- Security and configuration warnings
If there’s a yellow or red warning here, open a ticket. Typical ones are:
- “Cron job not executed” → we check the server cron
- “Database index missing” → we apply the index update
- “PHP memory limit too low” → server config
You don’t have to fix this yourself — we do that.
Basic settings
Server-wide defaults live here:
- Language and region defaults for new users
- Theming: logo, colors, header — separate article coming
- Email server: for notification mails. On our setups this comes preconfigured with our Mailcow setup, so Nextcloud mails come authentically from your domain.
Security
Important server-wide security defaults:
- Enforced 2FA for specific groups (the admin group, say)
- Allowed login attempts before brute-force protection kicks in
- Session timeout: how much inactivity before the login is dropped
We recommend mandatory 2FA for the admin group — all other users can enable it voluntarily.
Sharing
Server-wide sharing defaults:
- Default permissions for new sharing links: read / edit / upload
- Password requirement for public links: we actively recommend it
- Maximum expiration date for sharing links: 30 days is a typical default
- Allow federated sharing: Nextcloud-to-Nextcloud sharing between servers
More in Sharing.
Apps
Its own section in the administration overview. Here you can:
- Enable / disable apps
- Install apps from the app store
- Apply updates to existing apps
Active by default are the essentials — Files, Sharing, Calendar, Contacts, Talk, Activity, audit log.
From our experience, there are apps we generally recommend and apps we warn about. More in App overview.
User management
Its own item in the top navigation (not inside the administration settings). Profile icon → Users.
Here you can:
- Create, edit, disable users
- Create and manage groups
- Set quotas per user
- Control login behavior
More in Users and groups.
Activity
What happened server-wide — recent logins, new files, sharing actions. Handy for an overview, not a management tool.
Logging
Server logs in the web interface. This shows you errors and warnings from the Nextcloud log.
We check the logs regularly on the server side. If you spot anything odd — open a ticket, we’ll analyze it.
Email server
Configuration for outgoing mail (notifications, sharing invitations). Preconfigured on our setups. If you want to change it (to your own SMTP, say), you can do that here — but it’s rarely necessary.
Privacy and data export
Section for GDPR compliance:
- Privacy policy URL (Nextcloud shows it on the login page)
- Legal notice URL
- Data export function: users can export their data
If you have an external privacy policy, link it here.
SSO & SAML
Single sign-on against external identity providers (Microsoft Active Directory, Google Workspace, Keycloak, Authentik). Complex, rarely needed — if you want to use it, open a ticket and we’ll help with the configuration.
Workflow
Automatic actions based on file events:
- Set a tag when a file lands in a specific folder
- Block uploads of certain file types
- Send a notification on specific events
Powerful, but rarely used. If you need workflows, take a closer look at the “Workflow” app — we’re happy to help with specific setups.
Things you’ll see in the GUI that you normally should not touch
There are a few server-relevant sections Nextcloud shows you:
- Cache backend configuration: Redis setup. We’ve configured this — change nothing.
- Background job mode: cron / AJAX / webcron. We’ve set up cron, which is optimal.
- PHP configuration hints: memory limit, OPcache, etc. — server-side, configured fine.
If you see a warning in one of these areas, don’t try to fix it yourself. Instead:
- Take a screenshot.
- Open a ticket.
- We take care of it on the server side.
Frequently asked questions
Where do I find the Nextcloud version? Administration settings → Overview — right at the top.
How do I see which users are currently online?
The standard Nextcloud UI doesn’t show this directly. The Activity app shows recent actions. With OCC access there’s more visibility (occ user:list variants).
Can I filter logs? Yes, in Administration settings → Logging you can filter by level (Debug, Info, Warning, Error).
What do the security hints at the bottom of the overview mean? Nextcloud regularly checks against a list of best practices. Examples: HTTPS active, HSTS header set, cron running. Server topics are on us. Application topics (like “default phone region not set”) you can adjust yourself in the basic settings.
How do I see whether my Nextcloud is up to date? Administration settings → Overview shows the version plus whether updates are available. We apply updates — not you. If you see an older version running, open a ticket; we’ll schedule the next update.
Can I block apps so users can’t install them themselves? By default only admins can install apps. Users can enable them if the config allows it. You can define per app which group is allowed to use it.
What’s next
First login as a Nextcloud admin
What to do after your Nextcloud is provisioned — login, profile, the important first settings, what we handle and what you handle.
Creating users and groups
Create users for family, club or team, organize groups, set quotas, control login behavior.
Sharing — files with others, internally and externally
Sharing files in Nextcloud — within your cloud with other users, with groups, or externally via sharing link.
Securing sharing links — password, expiration date, file drop
Protecting public sharing links: password protection, expiration date, limiting permissions. Plus file drop for upload-only recipients.