Product environment console settings for DAM

Last updated: Feb-04-2025

You can configure settings that influence your account as a whole, as well as how your assets get uploaded, stored, and delivered within the currently selected product environment.

Some Settings affect both DAM users or admins and developers, so you should coordinate with other teams where relevant.

Click the Settings icon in the Console Options sidebar to view your Console Settings.

Account settings

The default settings are a good place to start but you'll want to review all the settings to ensure they meet your organization's needs.

This page highlights the product environment settings and options most relevant to Assets (DAM) users for managing and optimizing media workflows in Cloudinary.

Tip
For settings and options relevant to developers, refer to the product environment settings page in the Programmable Media Guides.

Overview

You can define the options that apply to the currently active product environment, including:

Option Useful for...
Upload Settings & Backup Influence how you upload media stored, and delivered in your product environment. Learn more
Upload Presets Define a set of asset upload options which can be applied to assets as they're uploaded. Learn more
Upload - The Upload Presets tab enables you to define a set of asset upload options, which users can apply to assets as they're uploaded. Learn more

- The Auto Upload Mapping tab is relevant if your assets are delivered on a website or app. It enables uploading files only when they're first accessed.

Optimization Determine the quality of the images and videos delivered programmatically.
Webhook Notifications Notify developers with programmatic responses at specified URLs when certain Console operations or API method calls complete.
Security Control sharing, access, and delivery of assets in your product environment. Learn more
API Keys Enable developers on your team to manage API key and secret pairs, which allow programmatic access to your product environment.

Note
To find out which roles grant permission to access each setting, see Role-based permissions.

Upload settings and backup

The Upload Settings and Backup page includes options that impact the default behavior applied to media when you upload assets to your product environment.

Pay special attention to the Automatic backup option, which determines whether every uploaded file is securely backed up, including support for multiple revisions. When enabled, the backups increase your account's storage usage (unless you set a private S3 or Google Cloud bucket for your backups).

Note
Explore additional options to control asset uploads on the Upload page of the Media Library Preferences.

Security settings

The Security page includes options that control how you share, access, and deliver assets. The settings impact only the selected product environment.

There are a variety of additional security options that affect specific API usage and asset delivery features. You can find details on these options within the relevant feature explanations throughout the Programmable Media documentation.

The following security configurations are those that you might want to take a look at as part of setting up a new product environment:

PDF and ZIP file sharing and delivery

The Allow delivery of PDF and ZIP files setting, in addition to determining whether PDF and ZIP files can be programmatically delivered, also affects asset and collection sharing in the Media Library. To publish collections containing PDF and ZIP formats, or a single asset in PDF or ZIP format (including .zip, .rar, .tgz, .gz, .bz2, .bzip, .7z, and .pdf), you must enable this setting.

Data privacy

Cloudinary takes the responsibility of protecting your data seriously, and complies with widely accepted security standards and regulations, enterprise class security features, our privacy policies, and our commitment to transparency. See our Trust page for more information.

When necessary, a Cloudinary employee with specific authorization may need to enter a product environment for the purposes of providing technical support. Cloudinary customers on a Programmable Media Enterprise plan can request an additional layer of privacy that’s enabled per product environment. This additional layer of privacy hides all data in the enabled product environments from all Cloudinary employees, even those with the permission levels necessary to provide that kind of support.

The additional layer of privacy prevents Cloudinary employees from:

  • Accessing the product environment's full API secret, which prevents accessing data programmatically.
  • Accessing delivery URLs via the Media Library.
  • Viewing asset thumbnails or previews in any page of the Media Library.
  • Performing an asset search of any kind.
  • Using the Bulk Delete option in the Security page of the Console Settings.
  • Seeing actual public IDs, folder names, or collection names.

At some point, you may need Cloudinary to access your actual data while providing technical support. In that case, Admins, as well as Master admins, can allow temporary access to the product environment. From the Security page of the Console Settings, check Allow temporary access and set the time limit for access.

Admins and Master admins can change access settings at any time, including canceling access and changing its time limit.

All administrators receive an email notifying them of any change in access status, including when any account administrator allows or cancels access, changes the time limit, or when the time limit expires.

Note
If you're on a Programmable Media Enterprise plan, you can contact our Enterprise support and sales team or your CSM to enable this feature.

API keys

The API Keys page of the Console Settings lets you handle API key and secret pairs for your product environment. Here, you can create new API keys and secrets, activate or disable them, copy API keys and secrets, or delete them.

If you've dedicated an API key for signing webhook notifications, you can't deactivate or remove that key. If you need to deactivate or remove this key, you must first replace it with another API key to serve as the dedicated key for webhook notifications. You can do this by navigating to the Webhook Notifications page of the Console Settings. For more information, see Webhook notifications.

Note
If you're on a Programmable Media Enterprise plan, you can manage API keys programmatically via the access_keys endpoint of the Provisioning API.

✔️ Feedback sent!

Rate this page: