Skip to main content
The Settings area in Nexus is where you configure organization-wide preferences — from which Entra tenants are connected, to who on your team has access to Nexus, to how frequently data is synced. Changes you make in Settings apply to your entire Nexus organization and are visible to all team members with Admin or Owner access.

​
Connected Tenants

The Connected Tenants page is the central hub for managing your Microsoft Entra ID connections. From here you can:
  • View all linked tenants alongside their current sync status (Synced, Syncing, or Error)
  • See the last-synced timestamp for each tenant so you always know how fresh your data is
  • Trigger a manual sync on any tenant at any time by clicking the tenant name and selecting Sync Now — useful after a bulk change in Entra ID that you want reflected in Nexus immediately
  • Connect a new tenant or disconnect an existing one
For full instructions on connecting a tenant for the first time, see Connect Microsoft Entra ID to Scalio Nexus.

​
Team members & roles

Nexus uses role-based access control to let you give each team member exactly the level of access they need. The four available roles are:

Owner

Full access to all Nexus features, including billing management and organization-wide settings. Owners can invite and remove team members and change any member’s role. Each Nexus organization has at least one Owner.

Admin

Full access to all Nexus features — dashboards, access reviews, automation rules, reports, and settings — except billing. Suitable for IT administrators and security leads who manage day-to-day operations in Nexus.

Reviewer

Can view dashboards and complete assigned access reviews, but cannot change Settings or create automation rules. Designed for members of your security or compliance team who participate in reviews without managing the platform.

Viewer

Read-only access to dashboards and reports. Viewers cannot take any action in Nexus. Suitable for executives or auditors who need visibility into posture and review outcomes without interacting with the platform.
To invite a team member:
1

Open the Team settings page

Go to Settings > Team and click Invite Member.
2

Enter the invitee's email address

Type the person’s work email address in the field provided.
3

Assign a role

Select the role you want to assign from the dropdown. Refer to the role descriptions above if you’re unsure which role to choose.
4

Send the invitation

Click Send Invite. The invitee receives an email with a link to activate their Nexus account. If they already have a Nexus account, they’re added to your organization immediately.
Pending invitations appear on the Team page until accepted.

​
Sync settings

Nexus continuously keeps your identity data up to date by syncing from your connected Entra tenants on a configurable schedule. You can choose the sync frequency that best balances data freshness with your plan’s sync quota. In addition to scheduled syncs, Nexus listens for real-time audit log events from Entra ID. When a significant change is detected — such as a new privileged role assignment, a guest user invitation, or a conditional access policy modification — Nexus processes that event immediately, without waiting for the next scheduled sync. This means your posture findings and dashboards reflect critical changes within seconds, regardless of your sync schedule. To change the sync frequency for a tenant, go to Settings > Connected Tenants, click the tenant name, and select your preferred frequency under Sync Schedule. You can also click Sync Now to trigger a full manual sync at any time.

​
Data retention

Nexus retains your posture history and access review records for 2 years by default. This gives your compliance and audit teams access to a meaningful historical record without requiring any manual archiving on your part. The following data is subject to this retention policy:
  • Posture score history and finding timelines
  • Completed and cancelled access reviews, including reviewer decisions and comments
  • Automation rule activity logs
  • Sync history and change events
If your organization requires a longer or shorter retention window — for example, to meet a specific regulatory requirement or to minimize data stored in Nexus — contact Scalio support to configure a custom retention period. Custom retention periods are available on Enterprise plans.

​
API access

The Nexus API lets you integrate Nexus data into your own tooling, SIEM, or reporting workflows. To authenticate API requests, you’ll need to generate an API key. Go to Settings > API Keys and click New API Key. Give the key a descriptive name (for example, splunk-integration or quarterly-audit-script) so you can identify it later. Each key displays:
  • Name — the label you assigned when creating it
  • Created — the date the key was generated
  • Last used — the timestamp of the most recent authenticated API request made with that key
API keys are shown in full only once at creation time — copy and store the key securely before closing the dialog. If a key is lost or compromised, delete it from Settings > API Keys and generate a new one. Deleted keys stop working immediately.
Invite your security and compliance team members as Reviewers so they can participate in access reviews without needing full admin access to Nexus settings or automation rules.