Skip to main content


Many of Sonatype Nexus Repository's features that can be enabled or disabled are configured as capabilities under AdministrationSystemCapabilities.

You must have the nx-capabilities privilege to manage capabilities.

Available Capabilities

Sonatype Nexus Repository includes the following capabilities:

Capability Type




Enable audit of system changes.

Created automatically on initial startup.

Base URL

Specify the reverse proxy base URL for your instance to be used in email notifications.

See Base URL Capability


Enables use of Atlassian Crowd for user authentication.

See Atlassian Crowd Support

Default Role

When enabling this capability, you will select one role from all of the available roles in your instance that will be granted to all authenticated users. This means all authenticated users will have all of the privileges assigned to that role.

See Default Role

Firewall Audit and Quarantine

When enabled, the repository will be audited and components will be evaluated against associated policy.

See Nexus Suite Integration

Health Check: Configuration

Enables Repository Health Check for your proxy repositories.

Those using Sonatype Repository Firewall will not see Repository Health Check in their Sonatype Nexus Repository instance. Firewall is a much more fully featured tool for identifying security risks in your repositories. Learn more about Sonatype Repository Firewall on

In-Product Analytics

Provide anonymous, non-sensitive information to help us improve Sonatype Nexus Repository.

Log4J Visualizer

Identify log4j component downloads impacted by CVE-2021-44228.

See Log4j Visualizer

Node: Identity

Provides the unique identity for a Sonatype Nexus Repository server.

Created automatically on initial startup.

NXRM2 style URLs

Provides support for Sonatype Nexus Repository 2-style URLs.

See Configuring Legacy URL Paths

Outreach: Management

Manages outreach (front page & update notifications) settings.

Created automatically on initial startup.

Rut Auth

Configure the HTTP header used for remote user token authentication.

See Authentication via Remote User Token


Configures scheduler details.

  • Created automatically on initial startup.

  • See Tasks

Storage Settings

Configures storage settings.

UI: Branding PRO

Insert customized messaging into the header and/or footer of your user interface.

UI: Settings

Customize some user interface settings.


Used to configure upgrades from Sonatype Nexus Repository 2 to Sonatype Nexus Repository 3.

See Upgrading from Nexus Repository Manager 2

User Token

Require user tokens for repository authentication

  • Created automatically on initial startup.

  • See User Tokens

Webhook: Global

Send HTTP POST requests for global events.

See Enabling A Global Webhook Capability

Webhook: Repository

Send HTTP POST requests for repository events.

See Enabling A Repository Webhook Capability

The list of existing capabilities can be filtered with the search input box in the header of the list and sorted by the different columns by pressing a column header. The list uses the following columns:


The State column does not have a title. Enabled capabilities have a green checkmark added on top of a blue icon. Disabled capabilities use a greyed out icon.


The Type column provides the specific type of a capability in the list.


The Category is optional and details the wider context the capability belongs to.


The Description column contains further descriptive information about the capability.


The Notes column can contain user created text about the capability.

Creating a Capability

  1. To create a capability, navigate to Administration → System → Capabilities.

  2. Select the Create capability button.

  3. Select the type of capability you wish to create.

  4. Enter the required configuration information; then, select Create capability.

Disabling a Capability

  1. To disable a capability, navigate to Administration → System → Capabilities.

  2. Select the capability you wish to disable.

  3. Select the Disable button.

  4. The capability is disabled and a success message appears.

  5. You can re-enable a capability at any time by selecting the Enable button on this same screen.