couple of places.
Control Panel » Portal Layout
Select a location where to place it.
Control Panel » Portal Settings
Cache time for Who's Online
Control Panel » Display Options
[+] Who's online
I think there is a permission item also but can't remember
