Who this guide is for: Administrators who set up and manage Claude for Government for their agency.
Find your section:This guide covers the portals used to manage Claude for Government: how access, seats, and usage are organized, and who is responsible for each part. If you just want to use Claude for Government, you don’t need this guide. You can simply sign in and start a conversation, and come back here when you need to manage other people’s access or understand why something is configured the way it is.
How your deployment is organized
Claude for Government is organized as a three-level hierarchy: Tenant → Organizations → UsersTenant
The tenant is the top level, and it represents your agency’s overall deployment. There is exactly one tenant per agency, and it holds the things that are shared across everyone: your connection to your identity provider for single sign-on, automatic user provisioning (where your directory system creates and updates accounts for you), the list of verified email domains, and the pool of credits and seats issued to you by Anthropic. The tenant is managed by a short list of tenant administrators. They create organizations, decide how seats are divided among them and what spend caps are set, and set policies that apply across the whole agency.Organizations
An organization is a group of users who share a pool of seats and a set of policies, with its own spend caps. You might create one organization for each bureau, office, or program, or you might run the whole agency as a single organization. Most agencies start with a single organization. You would create more when you need any of the following:- Separate billing accounts so one group’s usage never draws down another group’s balance.
- Separate usage reporting for each bureau or program.
- Different product settings, seat tiers, or access rules for different parts of your agency.
Users
A user is a single person. Every user belongs to exactly one organization, and two properties control what they can do:- A user’s role determines what they can manage. Most people have the User role, which means they use Claude but don’t administer anything. Owners and Primary Owners manage the organization: they manage members’ roles and seats, and adjust organization-level settings.
- A user’s seat tier determines how much they can use Claude. A seat tier is a named bundle of usage limits (for example, how much Claude usage a person gets in a given period). A user with no seat assigned can sign in and see their account, but they can’t send messages until an owner assigns them a seat.
Billing accounts
A billing account is where your agency’s credits and seats live. Anthropic sets up one or more billing accounts with your agency, and each one holds a prepaid credit balance (a dollar amount that is drawn down as people use Claude) and a pool of seats (a fixed number of seats in each tier). Every organization is linked to exactly one billing account, and usage by that organization draws directly from the account’s balance. Several organizations can share the same billing account, or each organization can have its own. Tenant administrators divide each billing account’s seat pool among the organizations it funds, and can set per-organization spend caps to control how much any one organization draws from a shared balance.The three views
The portal has three views. Which ones you can reach depends on your role, and you switch between them using the link in the page footer.
When you sign in, you land on the most relevant view for you. Organization owners land on the organization admin view, and everyone else lands on their account view. This includes tenant administrators who are not also an organization owner; they start on their account view and can use the Switch to admin view link in the page footer, and from there switch to the tenant view.
A note on tenant administrators
Being a tenant administrator is separate from the role you hold inside an organization. Roles (User, Owner, and Primary Owner) control what you can do within a single organization, while tenant administrator status is granted by adding someone to the tenant’s Admins list and controls access to the settings that sit above every organization. The two are independent: an organization owner is not automatically a tenant administrator, and a tenant administrator does not automatically hold any particular role inside any organization.For tenant administrators: Because the tenant sits above every organization, you can also open the organization admin view and act on behalf of any organization in the tenant, even ones you don’t belong to. When the tenant has more than one organization, an organization switcher appears at the top of the admin view so you can choose which one you’re managing.
How people get access
Users reach your deployment in one of two ways, both of which are configured by a tenant administrator on the Identity and access page:- Single sign-on. The user enters their agency email address and is redirected to your identity provider (for example, Microsoft Entra, Okta, or ADFS). When they return authenticated, Claude for Government evaluates your tenant’s routing rules to decide which organization they belong in.
- Directory provisioning. If your identity provider supports SCIM, which is a standard way for directory systems to keep accounts in sync with other applications, you can connect it so that your directory pushes users and group memberships to Claude for Government automatically. Routing rules then place each provisioned user in an organization based on their group membership.
Where to go next
- Read Tenant administration if you’re a tenant administrator managing the overall deployment.
- Read Organization administration if you’re an owner managing a single organization.
- Read Your account if you want to understand your own profile, usage, and sessions.