Administration

Settings for administrators: users, roles and sign-in, the settings catalogue, custom fields, wording and numbering, scoped access, governance, offboarding, the licence and the agent.

1. 1 Settings overview The Settings home and its search, the 14 groups with every page in them, who can change what, how changes apply, and where each page is explained.
2. 2 Users Invite and add your team, see seats, change roles, set per-person exceptions, reset passwords and two-factor, link single sign-on, mark break-glass administrators, and turn off, hand over or delete accounts.
3. 3 Roles and permissions Role templates for every kind of staff, custom roles, module levels, actions and sensitive actions, customer scope, hidden fields for costs and personal details, and the kinds of work and seat each role has.
4. 4 Passwords and two-factor Set who must use two-factor or a passkey, alert people to sign-ins from somewhere new, sign out idle sessions, keep break-glass administrators, and understand how sessions follow your sign-in settings.
5. 5 Single sign-on Let your team sign in with Microsoft Entra ID, Google Workspace, any OpenID Connect provider or SAML 2.0, with domain limits, automatic accounts and roles from groups.
6. 6 Modules Start with the service desk and switch the rest of Tenvara on one module at a time: what each module gives and needs, Enable and Disable, what stops while a module is off, and the Home card.
7. 7 Devices and agent How the Tenvara agent behaves on every device: automatic updates, the check-in interval, remote session consent and which agent modules run.
8. 8 Customer portal settings The seven tabs of Settings > Customer portal: turning the portal on, its address and name, Home and navigation, Appearance, sections, sign-in, notices and what customers see.
9. 9 Your profile, security and notifications Your own account settings: your name, photo, language and working style, your password, two-factor and passkeys, where you are signed in, what notifications reach you where and when, your out of office and your phones.
10. 10 The settings catalogue and overrides Find any setting by searching, see what you have changed, put things back to their defaults, give one customer or contract its own value, and try changes on yourself first in test mode.
11. 11 Custom fields Add fields of your own to customers, sites, contacts, devices, tickets, contracts, quotes and projects, and use them in lists, filters, automation, reports, the portal and CSV.
12. 12 Terminology, numbering and email templates Call things what your business calls them, choose how ticket, quote, project and purchase order references look, and change the wording of every email Tenvara sends.
13. 13 Customer groups and scoped access Group customers, and limit a person or a whole role to some customers so they see nothing that belongs to anyone else, enforced in the database itself.
14. 14 Audit log, data retention and privacy requests The tamper-evident audit log of who did what, how long each kind of data is kept, legal holds, erasing inactive customers, and handling data subject requests from export to erasure.
15. 15 Sessions, IP allowlists and API tokens See and end sessions, limit where each role can sign in from, make scoped API tokens, ask staff to confirm it is them before sensitive changes, and set the staff password rules.
16. 16 Customer offboarding Take a leaving customer through one guided checklist: export their data, hand over or delete backups, remove agents, revoke Microsoft 365 access, stop billing, close the portal, archive or erase them, and finish with a completion certificate.
17. 17 Licence and updates How a self-hosted install's licence works, from the daily check-in to grace and read-only, offline licences, limits, Tenvara updates, What's new, System status and the support bundle.
18. 18 Integrations and the API Every integration Tenvara has, grouped by what it does and where it is set up, the integrations directory, IT Glue and Hudu sync, webhooks signed to the Standard Webhooks spec, API tokens, rate limits, what the server will fetch, and the developer reference.
19. 19 Teams, invitations and handover Group staff into teams with leads and queues, invite new people by email, hand over a leaver's work in one go, give a customer's own IT team co-managed access, and see the app as someone else with View as.
20. 20 Notifications The catalogue of every notification, defaults by role, each person's channels and mutes, what you follow, desktop and push notifications, the notifications page, digests, ticket routing, and why salespeople never get support work.
21. 21 Erasing a customer Erase a customer for good as a GDPR erasure: what goes and what is kept, legal holds, where to start it, backups and the second approval, the erasure page and its certificate, and erasing inactive customers automatically.
22. 22 System status How Tenvara itself is doing: the health checks, the five queue lanes and what holds them up, the install profile and sizing table, the upgrade clean-up, who is told when a part stops, monitors outside the install, the support bundle and the defaults for device diagnostics.
23. 23 Updates Which version of Tenvara you run, what is newer and whether your licence covers it, how an update of a self-hosted install runs, what it checks first, how it waits for running backups, how it upgrades the database first and rolls back if that fails, and what it tells you when it stops.
24. 24 Install settings and profiles The settings a self-hosted administrator meets in the install's .env file, renaming older settings before an update, the small, standard and large install profiles with their sizing guidance, and how much memory to give the backup service.
25. 25 What each role switch controls The role switches that matter most (Run scripts, Reveal credentials, Restore backups, the remote switches, Export, Bulk changes, Module settings, Change Microsoft 365, identity check overrides, device web pages, Docker, sales settings and the mobile app) and every place each one applies, with Owner protection, role templates, Reset to template and what happens to tokens.
26. 26 Browser extension settings and policy The settings in the browser extension (saving and updating passwords, the inline menu, fill on page load, matching, generated passwords, locking and the clipboard), the policy that sets and locks them for your team and for a customer's people, and what "Set by your organisation" means.