# Quickstart guide for administrators

<span lang="EN-US" style="mso-ansi-language: EN-US;">When the subscription is created, administrators must perform the initial configuration.  
</span><span lang="EN-US" style="mso-ansi-language: EN-US;">Users and accesses are defined via Trustelem, while the Entreprise Vault is managed via a dedicated application.</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">After that, the work mainly concerns the user lifecycle management: creating or deleting users, unblocking those who need help and finally checking product status and logs.</span>

### <span lang="EN-US" style="mso-ansi-language: EN-US;">Trustelem management</span>

##### <span lang="EN-US" style="mso-ansi-language: EN-US;">Initial setup</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">The first step when a customer acquires Enterprise Vault is to configure Trustelem. The goal is to define which users will have access to Entreprise Vault and how. These actions are performed by Trustelem administrators.</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">There are therefore 4 main steps in the setup.</span>

- <span lang="EN-US" style="mso-ansi-language: EN-US;">Add users, created locally or synchronized from directories</span>
    - <span lang="EN-US" style="mso-ansi-language: EN-US;">[Active Directory users](https://trustelem-doc.wallix.com/books/trustelem-administration/page/active-directory-users-trustelem-adconnect) </span>
    - [<span lang="EN-US" style="mso-ansi-language: EN-US;">Azure Active Directory users </span>](https://trustelem-doc.wallix.com/books/trustelem-administration/page/azure-ad-users)
    - <span lang="EN-US" style="mso-ansi-language: EN-US;">[Local Trustelem users](https://trustelem-doc.wallix.com/books/trustelem-administration/page/trustelem-local-users)  
        </span>
- <span lang="EN-US" style="mso-ansi-language: EN-US;">Add Enterprise Vault apps (user + admin)</span>
- [Define access rules](https://trustelem-doc.wallix.com/books/trustelem-administration/page/access-rules)
- [<span lang="EN-US" style="mso-ansi-language: EN-US;">Optionally, define the </span>](https://trustelem-doc.wallix.com/books/trustelem-administration/page/multi-factors-authentication)[usable](https://trustelem-doc.wallix.com/books/trustelem-administration/page/multi-factors-authentication) 2nd factors, as well as the enrollment methods

<span lang="EN-US" style="mso-ansi-language: EN-US;">**Note**: Trustelem administration page should always be secured using multi-factor authentication. To do so you need to enroll a 2<sup>nd</sup> factor for the admin accounts, then enable multi-factor using the option "Authentication level for Trustelem admin console" on Security settings &gt; General.</span>

##### <span lang="EN-US" style="mso-ansi-language: EN-US;">Subscription management</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">When the initial setup is done, Trustelem administration page is still usefull for:</span>

- <span lang="EN-US" style="mso-ansi-language: EN-US;">Managing changes in the setup (new users, new 2nd factors, new enrolment process...)</span>
- <span lang="EN-US" style="mso-ansi-language: EN-US;">Managing user password lost</span>
- <span lang="EN-US" style="mso-ansi-language: EN-US;">Managing advanced features (silent authentication, self-service password reset, siem integration, API automations...)  
    *More information about Trustelem are available here: [https://trustelem-doc.wallix.com/books/trustelem-administration](https://trustelem-doc.wallix.com/books/trustelem-administration)*</span>
- <span lang="EN-US" style="mso-ansi-language: EN-US;">Auditing the authentication</span>

### <span lang="EN-US" style="mso-ansi-language: EN-US;">Entreprise Vault setup</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">In this quickstart guide, a limited action number is presented. To see all the administrators tasks, you can use this link:</span>

[<span lang="EN-US" style="mso-ansi-language: EN-US;">https://vault-doc.wallix.com/books/entreprise-vault-administration</span>](https://vault-doc.wallix.com/books/enterprise-vault-administration)

##### Entreprise Vault administration access

To access Entreprise Vault administration page, a Trustelem user must have access to the Entreprise Vault administration application.  
By default, the subscription administrator is in the group "Entreprise Vault Admin" which has the access to this app.  
To add new Entreprise Vault administrators, the users must be affected to this group.

##### Entreprise Vault administration page

As mentioned in the previous point, the Entreprise Vault administration is done through an application. So, to access this app the administrators must use their Trustelem dashboard: https://<span lang="EN-US" style="mso-ansi-language: EN-US;">**<span style="color: rgb(53, 152, 219);">your\_domain</span>**</span>.trustelem.com.

##### <span lang="EN-US" style="mso-ansi-language: EN-US;">M</span><span lang="EN-US" style="mso-ansi-language: EN-US;">anage users</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">As a reminder, users creation is done through Trustelem admin page and not with Entreprise Vault admin app.</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">On the Entreprise Vault admin app you can manage:</span>

- <span lang="EN-US" style="mso-ansi-language: EN-US;">The Entreprise Vault users deletion from the Entreprise Vault data base.  
    *It will not remove users fromTrustelem*  
    *It will delete all the associated items*</span>
- <span lang="EN-US" style="mso-ansi-language: EN-US;">The obligation for users to change their master password at the next connection</span>
- <span lang="EN-US" style="mso-ansi-language: EN-US;">The change of user encryption keys</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">More information are available here: [https://vault-doc.wallix.com/books/entreprise-vault-administration/page/administration-application](https://vault-doc.wallix.com/books/former-documentation/page/administration-application)</span>

##### <span lang="EN-US" style="mso-ansi-language: EN-US;">Manage organization policies</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">On the Entreprise Vault admin app you can manage the settings applying to the entire company.  
</span><span lang="EN-US" style="mso-ansi-language: EN-US;">You can define rules for the logs, the security, the recovery process...</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">More information are available here: [https://vault-doc.wallix.com/books/entreprise-vault-administration/page/administration-application](https://vault-doc.wallix.com/books/former-documentation/page/administration-application)</span>

##### <span lang="EN-US" style="mso-ansi-language: EN-US;">A</span><span lang="EN-US" style="mso-ansi-language: EN-US;">udit the vault</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">On the Entreprise Vault admin app you can audit user's items, and share vault's items.</span>

<span lang="EN-US" style="mso-ansi-language: EN-US;">More information are available here: [https://vault-doc.wallix.com/books/entreprise-vault-administration/page/administration-application](https://vault-doc.wallix.com/books/former-documentation/page/administration-application)</span>