Administrator guide
Everything that can be administered lives on your organization鈥檚 site, at app.mekovault.com/<your-company>/settings.
People and roles
A search over the directory. Each role defines what a person can do:
| Role | Can |
|---|---|
| Administrator | Everything: products, people, roles, billing. |
| Ticket support | Receive, handle and execute tickets (create, block, reactivate accounts, aliases, groups). |
| People and Culture (HR) | Request onboardings, offboardings and reactivations and track their status. Does not execute. |
| Requester | Request generic or secondary accounts, aliases, groups and temporary reactivations; view their own tickets. |
| Auditor | Read-only access to audit and reports. |
Removing all roles removes access. The last administrator can never be removed.
Products
In Products you see what you have contracted, its effective price with promotions and its operational status (Operational, With issues, Paused). The available tickets depend on the active products.
Operations calendar
Everything scheduled (account creations on the start date, blocks, expirations of temporary reactivations, reminders) is shown by day. You can cancel or reschedule; every change is recorded as a comment on the ticket and in the audit log.
Senders and templates
Configure which address emails are sent from per context (onboardings, offboardings, passwords, support) and send a test. You can choose to send them through the Mekovault relay with your address visible, or directly from your domain through the Gmail API using the same delegation you already authorized (requires the gmail.send scope). Email templates can be customized per language.
Access templates
They combine roles, groups and services that are provisioned together for a new person. They are chosen with selectors, without technical identifiers.
Audit
Every relevant action (roles, access, executed tickets, cancelled operations) is recorded with who, when and what changed. Audit records are immutable.
Delete the organization
An administrator can request deletion. It runs as a queued, audited process that revokes credentials, deletes secrets, data and email records, and sends an email with the details of each step once it completes.