Getting Started as a Hub Admin

This guide is for users who have been assigned the Hub Admin role in DekkoCORE. It explains what you are responsible for, walks you through common management tasks, and points you to the detailed guides you will need along the way.

The Hub Admin role is assigned by a Tenancy Manager or by another Hub Admin within the same Hub. If you believe you should have this role but do not see the Hub Admin controls, contact your Tenancy Manager or submit a support request.

A Hub is a collaboration space within DekkoCORE where users store, share, and collaborate on files. Think of a Hub as a secure project workspace, team folder, or case folder. Each Hub has its own set of members, roles, and content.

Hubs exist within a Tenancy. The Tenancy Manager controls organisation-wide policies (password requirements, sharing restrictions, upload limits, etc.), and those policies apply to all Hubs in the Tenancy. As a Hub Admin, you manage the day-to-day operation of your Hub within those boundaries. Users are automatically set as the Hub admin for each Hub they create.

As a Hub Admin, you can:

You cannot change Tenancy-wide policies such as password requirements, file size upload limits, or sharing restrictions. Those are managed by your Tenancy Manager. You also can’t access other in-Hub user’s content (files and messages) unless content is shared with you explicitly.

For a full breakdown of what each role can and cannot do, see Tenancy and Hub Roles.

The tasks below cover the most common things you will need to do as a Hub Admin. You do not need to do everything at once.

Log in to the DekkoCORE instance for your region:

Once logged in, select the Hub dropdown menu in the top middle of the screen and choose the Hub you manage.

To add a user from the file management interface:

The user will receive an email notification that they have been added to the Hub. If the user does not already have a DekkoSecure account, they will receive a registration invite.

For more details on how to invite and add users see Adding Users to a Hub article.

When you add a user to a Hub, you assign them one of three roles. Choosing the right role determines what that user can see and do within the Hub.

Hub Admin: Full control over the Hub. Can add and remove users, change roles, view Hub Audit logs, manage Hub branding and configure Hub-level settings. Assign this role to team leads or project managers who need to manage the workspace.

Team Member: Can share files with, request signatures from, and message other Team Member and External Members with the Hub. Can see other Hub members and if given the permissions invite users to the Hub and create additional Hubs. This is the standard role for internal users who need full collaboration access.

External Member: Can share files with, request signatures from, and message Team Member users in the Hub. Can see Team Member users in the Hub contact list but not other External Members. Create additional Hubs (if allowed in Tenancy policies). Assign this role to external partners, contractors, or collaborators who need access to specific files but should not have full visibility of the Hub.

For a complete permissions breakdown, see Tenancy and Hub Roles article.

To change a user's role or remove them from the Hub:

Removing a user from a Hub does not delete their DekkoCORE account or any files. It only revokes their access to that specific Hub and its contents.

As a Hub Admin, you can view audit logs for activity within your Hub. This includes file uploads, shares, member changes, and other actions.

To access the Hub audit log:

After loading the logs for a specific period you can use the fields to search for specific usernames, text or additional information if you are searching for a specific log.

For more detail on what is logged and how to read the log, please see the In-App Audit Logging article.

You can customise the appearance of your Hub by setting a Hub name, logo and settings such as features and whether External Upload and Sharing is restricted. This helps users identify the correct workspace, especially in organisations with multiple Hubs.

To access the Hub Branding:

For more detail on Hub configuration, see Create and Manage Hubs.

A Tenancy Manager administers the organisational environment: creating and deleting Hubs, setting Tenancy-wide policies, managing all users across the Tenancy, and configuring SIEM integrations. A Hub Admin manages a single Hub: adding and removing members, assigning roles, and reviewing Hub-level activity. Hub Admins cannot change organisation-wide policies or create new Hubs unless the Tenancy Manager has granted that permission.

For a full comparison, see Tenancy and Hub Roles.

DekkoCORE uses end-to-end encryption and explicit sharing. As a Hub Admin, you can manage Hub membership and settings, but you cannot view, open, or download files unless the content owner has explicitly shared them with you. This is by design and is a core security property of DekkoCORE.

When you remove a user from a Hub, their account remains active and any files they own continue to exist. However, their access to the Hub and its shared content is revoked. Files that were shared with the Hub by that user will still be accessible, if it was shared with other users. The other users will be able to access it with the permissions they were granted by the sharer.