Skip to main content
Version: Next

Admin Console

The Admin Console is the central management hub for your SyVault organization. It gives Owners and Admins a unified interface to control membership, configure security policies, manage SSO and SCIM integrations, and review audit logs -- all without ever having access to anyone's vault data.

Accessing the Admin Console

Log in to the web vault at vault.syvault.com and click Admin Console in the left sidebar. This option is visible only to users with the Owner or Admin role. Members without elevated privileges will not see the link.

info

The Admin Console operates under the same zero-knowledge architecture as the rest of SyVault. Admins can manage organizational structure and policies but cannot decrypt any user's vault contents.

Overview Tab

The landing page presents an at-a-glance dashboard with key metrics:

MetricDescription
Total MembersActive and invited users in your organization
Pending InvitationsInvites that have been sent but not yet accepted
TeamsNumber of teams configured
2FA AdoptionPercentage of members with two-factor authentication enabled
Recent ActivityLast 10 audit log entries

Members Tab

Manage the people in your organization. From this tab you can:

  • Invite new members by email (single or bulk CSV upload)
  • Assign roles -- Owner, Admin, or Member
  • Revoke access -- immediately deactivates a user and rotates shared keys
  • Filter and search by name, email, role, or 2FA status

When a member is removed, SyVault automatically re-wraps all shared folder keys so the departing user's key material can no longer decrypt shared data.

Teams Tab

Create and manage teams to organize members into logical groups. Each team can own shared folders with granular access controls. See Teams for details.

SSO & SCIM Tab

Configure enterprise identity integrations:

  • SAML 2.0 SSO -- connect your identity provider (Okta, Azure AD, Google Workspace, or any SAML 2.0-compliant IdP) so members authenticate through your existing SSO flow.
  • SCIM 2.0 Provisioning -- automate user lifecycle management. When a user is added or removed in your IdP, SyVault reflects the change automatically.

Both integrations are available on Business and Enterprise plans. See the SSO documentation for setup instructions.

Audit Log Tab

Every significant action within your organization is recorded with a tamper-evident audit trail. The Audit Log tab provides:

  • Real-time event stream with timestamp, actor, action, target, and source IP
  • Filtering by date range, action type, actor, or target
  • CSV/JSON export for offline analysis or SIEM ingestion

Audit logs are retained for 90 days. For longer retention or real-time streaming, configure a SIEM integration.

tip

Bookmark the Admin Console URL directly: https://vault.syvault.com/admin. You will still need to authenticate and have an Owner or Admin role to access it.