> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Getting Started Checklist

> The post-install task sequence for a fresh Syteca deployment — licenses, Client groups, users, monitoring configuration, PAM, USB rules, alerts, reports, dashboards, database, and Multi-Tenant mode.

After Application Server installation, Management Tool installation, and Client deployment, this is the checklist of tasks that gets the platform from "installed" to "operational." Work through it in roughly this order — the early items are prerequisites for the later ones.

For **SaaS** deployments, complete [Getting Started with a SaaS deployment](/docs/get-started/saas-deployment) first, then continue here. For [updating an existing Syteca deployment](/docs/administration/deployment/update-syteca), see the separate upgrade procedure.

## The 16 tasks

<Steps>
  <Step title="Assign endpoint licenses to Clients">
    Available licenses are **automatically assigned** to Clients on their first connection to the Application Server. If a license wasn't assigned, [assign it manually](/docs/administration/licensing/assign-endpoint-licenses).
  </Step>

  <Step title="Assign PAM seat licenses to PAM users">
    [PAM seat licenses](/docs/administration/licensing/assign-pam-seat-licenses) need to be assigned to specific users (on the **Users** page) before they can use any PAM functionality — Password Management page, Account Discovery page, Syteca Desktop Connection Manager, and Syteca Web Connection Manager.
  </Step>

  <Step title="Add Client groups">
    [Client groups](/docs/administration/clients/client-groups) let you grant access to multiple Clients at once and apply shared configuration — without needing to grant access to every Client individually.
  </Step>

  <Step title="Add users / user groups and define their permissions">
    [Add Management Tool users](/docs/administration/users/users#add-a-user) and [user groups](/docs/administration/users/users#add-a-user-group), then define their [administrative permissions](/docs/administration/users/administrative-permissions) and [per-Client permissions](/docs/administration/users/client-permissions).
  </Step>

  <Step title="Define Client and Client group configuration">
    Configure recording, monitoring, USB rules, and other settings on [individual Clients](/docs/administration/clients/overview) or — more efficiently — on [Client groups](/docs/administration/clients/client-groups) so settings propagate to all members.
  </Step>

  <Step title="Configure Password Management (PAM)">
    Walk through [Getting Started with Password Management](/docs/get-started/password-management) to configure secrets, Syteca Connection Manager (desktop or web), and the access-request workflow.
  </Step>

  <Step title="Configure Account Discovery">
    [Account Discovery](/docs/pam/discovery/overview) scans the network for privileged accounts and onboards them into PAM secrets — letting you bring existing accounts into management without manual entry.
  </Step>

  <Step title="Manage alerts">
    [Alerts](/docs/session-monitoring/alerts) notify investigators of potentially harmful or forbidden activity. [Create new alerts](/docs/session-monitoring/alerts#add-an-alert), [assign them](/docs/session-monitoring/alerts#assign-alerts-to-clients), and use [import / export](/docs/session-monitoring/alerts#import-and-export-alerts) for backup or migration between deployments. The platform also ships with a library of [default alerts](/docs/session-monitoring/default-alerts) for fraud, data leakage, illicit websites, and non-work activity.
  </Step>

  <Step title="Create USB monitoring rules">
    [USB monitoring rules](/docs/session-monitoring/usb-devices/usb-rules) detect (and optionally block) USB devices plugged into Windows Clients — with notifications, alerts, and per-device-class controls.
  </Step>

  <Step title="View monitoring results in the Management Tool">
    Monitored data from Clients flows to the [Session Viewer](/docs/session-monitoring/player/overview) — accessed via the [Sessions list](/docs/session-monitoring/sessions-list) on the Activity Monitoring page.
  </Step>

  <Step title="Export sessions for forensic use">
    Use [Forensic Export](/docs/session-monitoring/forensic-export) to produce encrypted session files that can be played in the standalone Syteca Forensic Player — useful for legal evidence, HR investigations, and third-party audit handovers.
  </Step>

  <Step title="Configure alert notifications">
    Configure how alert events reach investigators — [email and tray notifications, on-screen warnings, automatic blocking](/docs/session-monitoring/alerts#where-alert-events-surface). Notifications can also flow through the [Syteca Tray Notifications application](/docs/administration/deployment/tray-notifications) in the Windows notification area.
  </Step>

  <Step title="Generate reports">
    [Reports](/docs/session-monitoring/reports/overview) turn months of activity data into auditor-ready evidence — [scheduled](/docs/session-monitoring/reports/scheduled-reports) for recurring deliveries or [ad-hoc](/docs/session-monitoring/reports/ad-hoc-reports) for one-time investigations.
  </Step>

  <Step title="Set up dashboards">
    [User Activity Dashboards](/docs/session-monitoring/dashboards/user-activity-dashboards) visualize productivity, threat detection, and other monitoring data. [System Health dashboards](/docs/administration/dashboards/system-health-dashboards) show real-time platform health.
  </Step>

  <Step title="Configure database management">
    Configure [database cleanup and archiving](/docs/administration/deployment/database-management) to keep the live database manageable as your data volume grows. Old data can be archived to long-term storage and accessed later via [Archived Sessions](/docs/session-monitoring/archived-sessions). Also remove [uninstalled Clients](/docs/administration/clients/delete-clients) from the database.
  </Step>

  <Step title="Enable Multi-Tenant mode (if needed)">
    [Multi-Tenant mode](/docs/administration/multi-tenant/overview) lets a single Syteca deployment serve multiple isolated tenants — useful for MSSPs, large organizations with strict business-unit segregation, or service providers.
  </Step>
</Steps>

## What's next

After completing the checklist, the platform is fully operational. From here:

* **Update your deployment** — see [Update Syteca](/docs/administration/deployment/update-syteca) for upgrade best practices when a new version becomes available.
* **Harden security** — [disable the default admin user](/docs/administration/users/users#disable-the-default-admin) once another administrator is configured, [enable 2FA](/docs/administration/access/two-factor-authentication) for all users, configure [SSO integration](/docs/administration/integrations/sso) for enterprise sign-in.
* **Tune for compliance** — configure [Sensitive Data Masking](/docs/session-monitoring/masking/sensitive-data) for PCI DSS / HIPAA, the [Pseudonymizer](/docs/session-monitoring/masking/pseudonymizer) for GDPR, [SIEM integration](/docs/administration/integrations/siem) for your security operations center.

## Related

<CardGroup cols={2}>
  <Card title="SaaS deployment" icon="cloud" href="/docs/get-started/saas-deployment">
    First-hour onboarding for SaaS customers — mandatory password change, mandatory 2FA, serial key viewing, Client install.
  </Card>

  <Card title="Update Syteca" icon="arrow-up" href="/docs/administration/deployment/update-syteca">
    Upgrade procedure with Isolation Mode, data migration, .NET prereqs, and Client update strategy.
  </Card>

  <Card title="Getting started with PAM" icon="key-round" href="/docs/get-started/password-management">
    Configure Password Management — Connection Managers, secrets, third-party apps required.
  </Card>

  <Card title="Management Tool basics" icon="layout-dashboard" href="/docs/get-started/management-tool-basics">
    Sign-in patterns, navigation, brute-force lockout, language and tray notifications.
  </Card>
</CardGroup>