Administration

Settings (Admins only) is grouped by job: People & projects, Running pipelines (runtimes, secret stores, Debezium versions) and Guardrails (policies, templates, audit log). Sections that belong to one project show which at the top, with a picker to switch. Links to the former /admin/…, Members and Pipeline images pages redirect to their new place.

• People — every account (local and SSO), the one place for access. Add a person with a role in a project (or as Admin; leave the password empty for SSO users: the account links to their identity by email at the first sign-in). Filter by Can open to see and change who can open a project (its members and every Admin); Manage shows one person across all projects, makes them Admin, or deactivates the account (signed out everywhere, API tokens stop working; reactivating restores access). You cannot demote or deactivate yourself, and the last Admin is protected.
• Projects — create, rename and delete projects with their member and pipeline counts; People on a row opens who can open it. A project with pipelines cannot be deleted: delete those first so their connectors and source objects are cleaned up.
• Feedback — what people sent with Feedback at the bottom of the sidebar: something broken, a security issue, an idea or anything else, with the page they were on and their browser. Filter by open/resolved and type, open a report to read it in full, Reply by email or Mark resolved (and reopen). Every Admin gets an inbox entry per report in the project it came from (they can mute these under Notification settings). Anyone signed in can send up to 10 reports an hour; API tokens cannot send any. Messages are shown as plain text and never reach the audit log.

Upgrading from a version with per-project admins: each project admin becomes an editor with the approver right in that project (never an Admin). Make people Admins under People as needed.

• Audit log: Settings → Audit log; export as CSV or JSON Lines.
• Monitoring: GET /metrics (Prometheus) when BEZISYNC_METRICS_TOKEN is set; /healthz, /readyz.
• Master key rotation: set the new key as BEZISYNC_MASTER_KEY, the old one in BEZISYNC_PREVIOUS_MASTER_KEYS, restart, run bezisync rotate-master-key. Sessions and tokens move to the new key when used; remove the old key once users signed in again and tokens were used or re-issued.
• Telemetry: off by default. With BEZISYNC_TELEMETRY_ENABLED=true and BEZISYNC_TELEMETRY_URL, the controller sends anonymous aggregate counts weekly; preview the exact payload at GET /api/v1/system/telemetry (instance admins).
• Uninstall: bezisync uninstall prints everything BeziSync created on sources and runtimes; bezisync uninstall --yes [--drop-destinations] removes it and reports each item. Then delete BeziSync and its database.