Team, API Keys & Audit Log
Administrative settings for the people and machines that have access to your Sielum tenant.
Team & roles
Team management requires the Business plan, and is included in the 14-day trial.
Invite colleagues under Settings → Team. Each member has one of two roles:
| Role | Can do |
|---|---|
| Admin | Everything: change policies, firewall rules, Config Guard, enforcement modes, approve agents, manage the team |
| Viewer | Read the dashboard — devices, agents, AI usage, alerts |
Anything that changes the security posture is admin-only. A viewer can see what is happening but cannot loosen a control.
An invited member receives a magic-link email and sets their own password on first login. Their role is pushed into the identity provider, so the dashboard and the API agree on what they may do. Removing a member here revokes their access to the tenant.
API keys
Settings → API Keys issues tenant API keys for machine access to the REST API — for example a script that pulls the current inventory into a CMDB.
- The key is displayed once at creation; store it in your secret manager immediately
- Creating and deleting a key is written to the audit log
- Delete a key to revoke it instantly
API keys are tenant-scoped and carry the tenant's access. Treat one like an admin credential.
Enrollment tokens vs. API keys
Two different credentials that are easy to confuse:
| Enrollment token | API key | |
|---|---|---|
| Purpose | Let an agent register a new endpoint | Let a script call the REST API |
| Used by | The installer, once per endpoint | Your own tooling, ongoing |
| Created under | Settings → Enrollment Tokens | Settings → API Keys |
See Enrollment Tokens for the agent side.
Audit log
The audit log requires the Business plan, and is included in the 14-day trial.
Audit Log records the administrative actions taken in your tenant: policy changes, alert status changes, enrollment token and API key creation or deletion, exports, and enforcement mode changes. Each entry carries the acting user, the affected resource, and a timestamp. Click a row to see the full detail of what changed.
The audit log is a compliance record and is kept beyond the telemetry retention window, see Privacy & Data Retention.