> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scaliocloud.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Scalio Nexus Account and Organization Settings Guide
> Manage your Scalio Nexus organization settings including connected tenants, user roles, sync frequency, data retention, and API access.
The Settings area in Nexus is where you configure organization-wide preferences — from which Entra tenants are connected, to who on your team has access to Nexus, to how frequently data is synced. Changes you make in Settings apply to your entire Nexus organization and are visible to all team members with Admin or Owner access.
## Connected Tenants
The **Connected Tenants** page is the central hub for managing your Microsoft Entra ID connections. From here you can:
* View all linked tenants alongside their current sync status (**Synced**, **Syncing**, or **Error**)
* See the last-synced timestamp for each tenant so you always know how fresh your data is
* Trigger a **manual sync** on any tenant at any time by clicking the tenant name and selecting **Sync Now** — useful after a bulk change in Entra ID that you want reflected in Nexus immediately
* Connect a new tenant or disconnect an existing one
For full instructions on connecting a tenant for the first time, see [Connect Microsoft Entra ID to Scalio Nexus](/nexus/connecting-entra).
## Team members & roles
Nexus uses role-based access control to let you give each team member exactly the level of access they need. The four available roles are:
Full access to all Nexus features, including billing management and organization-wide settings. Owners can invite and remove team members and change any member's role. Each Nexus organization has at least one Owner.
Full access to all Nexus features — dashboards, access reviews, automation rules, reports, and settings — except billing. Suitable for IT administrators and security leads who manage day-to-day operations in Nexus.
Can view dashboards and complete assigned access reviews, but cannot change Settings or create automation rules. Designed for members of your security or compliance team who participate in reviews without managing the platform.
Read-only access to dashboards and reports. Viewers cannot take any action in Nexus. Suitable for executives or auditors who need visibility into posture and review outcomes without interacting with the platform.
**To invite a team member:**
Go to **Settings > Team** and click **Invite Member**.
Type the person's work email address in the field provided.
Select the role you want to assign from the dropdown. Refer to the role descriptions above if you're unsure which role to choose.
Click **Send Invite**. The invitee receives an email with a link to activate their Nexus account. If they already have a Nexus account, they're added to your organization immediately.
Pending invitations appear on the Team page until accepted.
## Sync settings
Nexus continuously keeps your identity data up to date by syncing from your connected Entra tenants on a configurable schedule. You can choose the sync frequency that best balances data freshness with your plan's sync quota.
| Sync Mode | Frequency | Best For |
| ------------ | ------------------------- | --------------------------------------------------------------------------------- |
| **Standard** | Every 4 hours *(default)* | Most organizations — provides a good balance of freshness and resource efficiency |
| **Frequent** | Every 1 hour | Organizations with rapid identity changes or strict posture SLAs |
In addition to scheduled syncs, Nexus listens for **real-time audit log events** from Entra ID. When a significant change is detected — such as a new privileged role assignment, a guest user invitation, or a conditional access policy modification — Nexus processes that event immediately, without waiting for the next scheduled sync. This means your posture findings and dashboards reflect critical changes within seconds, regardless of your sync schedule.
To change the sync frequency for a tenant, go to **Settings > Connected Tenants**, click the tenant name, and select your preferred frequency under **Sync Schedule**. You can also click **Sync Now** to trigger a full manual sync at any time.
## Data retention
Nexus retains your posture history and access review records for **2 years** by default. This gives your compliance and audit teams access to a meaningful historical record without requiring any manual archiving on your part. The following data is subject to this retention policy:
* Posture score history and finding timelines
* Completed and cancelled access reviews, including reviewer decisions and comments
* Automation rule activity logs
* Sync history and change events
If your organization requires a longer or shorter retention window — for example, to meet a specific regulatory requirement or to minimize data stored in Nexus — contact [Scalio support](mailto:support@scaliocloud.com) to configure a custom retention period. Custom retention periods are available on Enterprise plans.
## API access
The Nexus API lets you integrate Nexus data into your own tooling, SIEM, or reporting workflows. To authenticate API requests, you'll need to generate an API key.
Go to **Settings > API Keys** and click **New API Key**. Give the key a descriptive name (for example, `splunk-integration` or `quarterly-audit-script`) so you can identify it later. Each key displays:
* **Name** — the label you assigned when creating it
* **Created** — the date the key was generated
* **Last used** — the timestamp of the most recent authenticated API request made with that key
API keys are shown in full only once at creation time — copy and store the key securely before closing the dialog. If a key is lost or compromised, delete it from **Settings > API Keys** and generate a new one. Deleted keys stop working immediately.
Invite your security and compliance team members as **Reviewers** so they can participate in access reviews without needing full admin access to Nexus settings or automation rules.