Administrative responsibilities

This article outlines the responsibilities of both customers and senhasegura concerning Private SaaS.

Customer responsibilities

Access management

Customers are responsible for controlling access and managing user identities, which includes configuring policies, groups, and permissions. It's crucial for customers to promptly deactivate users who no longer require access to the application.

Network and security

Customers are responsible for configuring the VPN peer and maintaining an active internet connection to access senhasegura. Additionally, they must set up network configurations to enable their users to access the application. Customers are also accountable for maintaining security policies in their environment and designating focal points for communication with the senhasegura Support team.

Deployment

The initial setup of primary vault entities falls under the customer's responsibility. Customers are also responsible for ensuring connectivity between the vault and target devices. Custom support services can be separately contracted if needed.

senhasegura’s responsibilities

Operation

senhasegura takes responsibility for performing snapshots, updates, and restorations in case of unavailability.

Monitoring

senhasegura is tasked with ensuring the overall health of the environment. On the other hand, customers are responsible for monitoring user behavior, auditable events, and adherence to security policies. Customers also have the option to configure SIEM/Syslog for receiving security events.

Backup

It's senhasegura's responsibility to have backups of the clients' environments. That's why we take snapshots.

High Availability

senhasegura is responsible for provisioning the environment, conducting restorations, and performing product updates. Availability is guaranteed solely on the senhasegura connection side. End-to-end availability depends on the proper configuration of the VPN peering gateway, firewall rules, and internet connection quality.