Integration: Kaseya SIEM and Syncro RMM

Kaseya SIEM

NAVIGATION  Organizations > Edit Organization > + New Application

PERMISSIONS  Ability to connect MSP tools to organizations

Syncro

NAVIGATION  More > Admin > API Tokens

PERMISSIONS  Ability to create API tokens with custom permissions

To create an API token, complete the following steps:

1. Expand the More menu and click Admin.

   

2. Scroll down and click API Tokens under API on the side navigation menu.

   

3. Click + New Token.

   

4. Select Custom Permissions.

   

5. Provide a name and expiration date.

   

6. Assign permissions as needed. Recommended permissions are as follows:

   • Assets - View Details

   • Assets - List/Search

   • Contacts - Import

   • Customers - List/Search

   • Customers - View Detail

   • Customers - View Total Invoiced

   • Products - List/Search

   • Products - View Cost

   • Line Item - Edit Prices

   • Line Item - View Cost

   • Line Item - Add Manual Item for Invoices/Estimates

   • Tickets - List/Search

   • Tickets - View Details

   • Tickets - Create

   • Tickets - Edit

   • Ticket Comments - New

   • Recurring Invoices - List

   • Recurring Invoices - Edit

   • RMM Alerts - List

   • RMM Alerts - Create

   • RMM Alerts - Clear/Manage

7. Click Create API Token.

8. Copy the token, store it securely, and click Done.

   

Outcome: The API token is available for use when connecting Syncro in SaaS Alerts.

To enable the integration, complete the following steps:

1. From the side navigation menu, click Organizations.

   

2. Select an organization and click Edit Organization (pencil icon).

   

3. Click + New Application.

   

4. Under MSP Tools, select Syncro.

   

1. Enter the Syncro domain (client domain).

2. Enter the API token created earlier.

3. Click Next.

   

If credentials are valid, the wizard proceeds to Account Mapping.

Outcome: Connection to Syncro is established.

NOTE  If an existing Syncro integration is already configured, you may see a warning. Unless you are intentionally connecting multiple Syncro instances, cancel the setup to avoid creating duplicate integrations.

After the Syncro credentials are validated, the wizard moves to Account Mapping.

This step determines how Syncro data is associated with Kaseya SIEM organizations.

User activity

• Select a User Activity Organization

• All user activity and actions from Syncro are associated with this organization

• This organization cannot be changed after the integration is configured

Device organization mapping

• Map each Syncro organization to a Kaseya SIEM organization using the Device Organization Mapping table

• Only mapped organizations will have devices discovered and processed

• Unmapped organizations will not provide device data

Optional settings

• Automatically map organizations with a 100% match: When enabled, Syncro organizations are automatically mapped to Kaseya SIEM organizations when names match exactly.

• Ignore from Automatic Mapping: Exclude specific organizations from automatic mapping, if needed.

Once mapping is complete, click Finish.

Outcome:

• Syncro organizations are mapped to Kaseya SIEM organizations

• Device data and associated alerts are processed only for mapped organizations

• User activity is associated with the selected User Activity Organization

NOTE  You can edit the Syncro connection at any time after setup to update mappings or add new ones.

To disable the integration, complete the following steps:

1. From the side navigation menu, click Organizations.

2. Select the organization and click Edit Organization (pencil icon).

3. In the Applications tab, select Syncro under MSP Tools.

4. Click Disconnect Application and confirm.