You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/docs/claude-code/accessibility.md
+3-1Lines changed: 3 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -62,6 +62,8 @@ Each message in the transcript starts with a label your screen reader announces,
62
62
63
63
The terminal cursor follows the input caret, so a screen reader's read-current-line command answers "where am I" with the prompt you're editing.
64
64
65
+
{/* min-version: 2.1.210 */}Cycling [permission modes](/en/permission-modes) with `Shift+Tab` announces the mode you land on, such as `[plan mode on]` or `[accept edits on]`. Claude Code prints the announcement once and doesn't repeat it on later redraws. Requires Claude Code v2.1.210 or later.
66
+
65
67
### Jump between turns
66
68
67
69
Claude Code emits OSC 133 shell-integration markers at turn boundaries, so your terminal's jump-to-previous-prompt key moves between turns without reading through the whole transcript:
@@ -105,7 +107,7 @@ These options address accessibility needs outside of screen reader mode. All of
105
107
Some behaviors aren't adapted for screen reader mode:
106
108
107
109
* Screen reader mode doesn't turn on automatically when a screen reader is running.
108
-
*Mode changes, such as entering [plan mode](/en/permission-modes#analyze-before-you-edit-with-plan-mode), aren't announced yet.
110
+
*Claude Code doesn't announce a permission mode change made in any way other than cycling with `Shift+Tab`, such as entering [plan mode](/en/permission-modes#analyze-before-you-edit-with-plan-mode) from a command.
109
111
* Attaching to a [background session](/en/agent-view) with `claude attach` or from agent view enters the terminal's alternate screen, which has no native scrollback. This is the [same behavior as other attached sessions](/en/fullscreen). To get back out, press Left Arrow on an empty prompt, or Ctrl+Z if a dialog has focus.
110
112
* Claude Code announces costs in the summary it prints at exit, not per turn.
111
113
* Screen reader mode doesn't change [non-interactive mode](/en/headless) with the `-p` flag. Non-interactive mode already writes plain text and remains an alternative for scripting.
Copy file name to clipboardExpand all lines: content/en/docs/claude-code/admin-setup.md
+16-15Lines changed: 16 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -80,21 +80,22 @@ Processes inside the WSL 2 utility VM aren't visible to Windows-side endpoint de
80
80
81
81
Managed settings can lock down tools, sandbox execution, restrict MCP servers and plugin sources, and control which hooks run. Each row is a control surface with the setting keys that drive it.
|[Permission rules](/en/permissions)| Allow, ask, or deny specific tools and commands |`permissions.allow`, `permissions.deny`|
86
-
|[Permission lockdown](/en/permissions#managed-only-settings)| Only managed permission rules apply; disable `--dangerously-skip-permissions`|`allowManagedPermissionRulesOnly`, `permissions.disableBypassPermissionsMode`|
87
-
|[Sandboxing](/en/sandboxing)| OS-level filesystem and network isolation with domain allowlists |`sandbox.enabled`, `sandbox.network.allowedDomains`|
88
-
|[Managed policy CLAUDE.md](/en/memory#deploy-organization-wide-claude-md)| Org-wide instructions loaded in every session, can't be excluded | File at the managed policy path |
89
-
|[MCP server control](/en/managed-mcp)| Restrict which MCP servers users can add or connect to, or deploy a fixed set |`allowedMcpServers`, `deniedMcpServers`, `allowManagedMcpServersOnly`, or a deployed `managed-mcp.json` file |
90
-
|[Plugin marketplace control](/en/plugin-marketplaces#managed-marketplace-restrictions)| Restrict which marketplace sources users can add and install from, reject the CLI flags that sideload plugins, agents, and MCP servers for a single run, and allowlist which marketplaces' plugins can be suggested |`strictKnownMarketplaces`, `blockedMarketplaces`, `disableSideloadFlags`, `pluginSuggestionMarketplaces`|
91
-
|[Customization lockdown](/en/settings#strictpluginonlycustomization)| Block skills, agents, hooks, and MCP servers from user and project sources, so they can only come from plugins or managed settings |`strictPluginOnlyCustomization`|
|[Login enforcement](/en/settings#available-settings)| Restrict interactive login to a specific method or Anthropic organization. When set, sessions authenticated by `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN`, or `apiKeyHelper` are blocked at startup; cloud provider sessions aren't affected |`forceLoginMethod`, `forceLoginOrgUUID`|
94
-
|[Disable agent view](/en/agent-view#how-background-sessions-are-hosted)| Turn off `claude agents`, `--bg`, `/background`, and the on-demand supervisor |`disableAgentView`|
95
-
|[Model restrictions](/en/model-config#restrict-model-selection)|`availableModels` filters which models appear in the picker. Adding `enforceAvailableModels` also constrains the auto-selected default model. See [surface coverage](/en/model-config#surface-coverage) for how this setting reaches the CLI, web, and IDE |`availableModels`, `enforceAvailableModels`|
96
-
|[Version floor](/en/settings)| Prevent auto-update from installing below an org-wide minimum |`minimumVersion`|
97
-
|[Required version range](/en/settings)| Refuse to start at all when the running version is outside an org-approved range. Stronger than `minimumVersion`, which only blocks downgrades |`requiredMinimumVersion`, `requiredMaximumVersion`|
|[Permission rules](/en/permissions)| Allow, ask, or deny specific tools and commands |`permissions.allow`, `permissions.deny`|
86
+
|[Permission lockdown](/en/permissions#managed-only-settings)| Only managed permission rules apply; disable `--dangerously-skip-permissions`|`allowManagedPermissionRulesOnly`, `permissions.disableBypassPermissionsMode`|
87
+
|[Sandboxing](/en/sandboxing)| OS-level filesystem and network isolation with domain allowlists |`sandbox.enabled`, `sandbox.network.allowedDomains`|
88
+
|[Managed policy CLAUDE.md](/en/memory#deploy-organization-wide-claude-md)| Org-wide instructions loaded in every session, can't be excluded | File at the managed policy path |
89
+
|[MCP server control](/en/managed-mcp)| Restrict which MCP servers users can add or connect to, or deploy a fixed set |`allowedMcpServers`, `deniedMcpServers`, `allowManagedMcpServersOnly`, or a deployed `managed-mcp.json` file |
90
+
|[Plugin marketplace control](/en/plugin-marketplaces#managed-marketplace-restrictions)| Restrict which marketplace sources users can add and install from, reject the CLI flags that sideload plugins, agents, and MCP servers for a single run, and allowlist which marketplaces' plugins can be suggested |`strictKnownMarketplaces`, `blockedMarketplaces`, `disableSideloadFlags`, `pluginSuggestionMarketplaces`|
91
+
|[Customization lockdown](/en/settings#strictpluginonlycustomization)| Block skills, agents, hooks, and MCP servers from user and project sources, so they can only come from plugins or managed settings |`strictPluginOnlyCustomization`|
|[Login enforcement](/en/settings#available-settings)| Restrict interactive login to a specific method or Anthropic organization. When set, sessions authenticated by `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN`, or `apiKeyHelper` are blocked at startup; cloud provider sessions aren't affected |`forceLoginMethod`, `forceLoginOrgUUID`|
94
+
|[Disable agent view](/en/agent-view#how-background-sessions-are-hosted)| Turn off `claude agents`, `--bg`, `/background`, and the on-demand supervisor |`disableAgentView`|
95
+
|[Configure the corporate launcher](/en/corporate-launcher)| Prefix the [background-agent supervisor](/en/agent-view#how-background-sessions-are-hosted), its workers, and the [other covered background processes](/en/corporate-launcher#what-the-launcher-covers) with a required corporate launcher instead of turning agent view off |`processWrapper`|
96
+
|[Model restrictions](/en/model-config#restrict-model-selection)|`availableModels` filters which models appear in the picker. Adding `enforceAvailableModels` also constrains the auto-selected default model. See [surface coverage](/en/model-config#surface-coverage) for how this setting reaches the CLI, web, and IDE |`availableModels`, `enforceAvailableModels`|
97
+
|[Version floor](/en/settings)| Prevent auto-update from installing below an org-wide minimum |`minimumVersion`|
98
+
|[Required version range](/en/settings)| Refuse to start at all when the running version is outside an org-approved range. Stronger than `minimumVersion`, which only blocks downgrades |`requiredMinimumVersion`, `requiredMaximumVersion`|
98
99
99
100
Organizations whose members authenticate through claude.ai or the Anthropic API can also govern models without deploying settings: [organization model restrictions](/en/model-config#organization-model-restrictions) disable individual models, an [organization default model](/en/model-config#organization-default-model) sets which model new sessions start on, and [organization effort limits](/en/model-config#organization-effort-limits) cap effort levels per role. All three controls require a Claude Enterprise plan. Model restrictions and effort limits are enforced server-side; the default model is a starting point that users can change, unless the organization enforces it. Enforcement is available to a limited set of organizations; ask your Anthropic account team about availability. None of these controls reach sessions on Amazon Bedrock, Google Cloud's Agent Platform, Microsoft Foundry, or [Claude Platform on AWS](/en/claude-platform-on-aws); on those providers, use `availableModels` above for restrictions and the `model` key in managed settings for a default.
0 commit comments