1.7Glossary
Last updated
| Term | Meaning |
|---|---|
| Active role | The one role, among those you hold, that currently decides what you may do. You can switch it without signing out. |
| Agent | An AI application connected to the MCP server that acts on behalf of a person. |
| API key | A machine credential owned by a platform user and given a role, used by scripts and integrations. |
| Approval | A person's decision to let a held machine-credential operation run, or to reject it. |
| Audit chain | The hash-chained, signed record of every change to operation records, which makes tampering detectable. |
| Base DN | The distinguished name below which a directory connection manages objects. |
| Browser surface | The /rest routes used by the web console, authenticated by the session cookie. |
| Connected agent | An AI agent that a person has authorised through the consent screen. |
| Directory connection | The stored definition of how to reach one Active Directory domain. |
| Distinguished name (DN) | The full LDAP path of a directory object, for example CN=Jane Doe,OU=Staff,DC=example,DC=com. |
| Kill switch | Configuration entries that disable operations for the whole installation, which no screen can switch back on. |
| Licence module | A part of the product that is unlocked by the licence, such as mcp or recycle-bin. |
| Machine surface | The /api routes used by integrations, authenticated by API key or bearer token. |
| MCP | Model Context Protocol, the open protocol AI applications use to call tools. |
| Operation | One request to read or change something, as recorded in the operations log. |
| Operation policy | The per-operation setting that can disable an operation or make agents always ask, globally or per directory. |
| Permission | A named right such as ad:groups:update, granted through roles. |
| Platform user | A person who signs in to SYNERGY Management Gateway. |
| Protected container | An organizational unit you declare protected for one directory, so that agent changes inside it always need approval. |
| Role | A named set of permissions and directory connections assigned to platform users and API keys. |
| Supervision level | How far a machine credential is trusted to act without approval: Unsupervised, Guarded or Supervised. |
| System Admin | The built-in role holding every permission and reaching every directory, required for installation-wide settings. |
| Update agent | The Windows service that checks for and installs new releases. |
| Waiting operation | A machine-credential operation held for approval. |
| Workspace directory | The directory connection the console is currently working in. |
Last updated
Thank you for your feedback.