> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up a Sysdig connector

> C1 provides identity governance for Sysdig. Integrate your Sysdig account with C1 for unified visibility and governance over user access.

C1 provides identity governance for Sysdig. Integrate your Sysdig account with
C1 for unified visibility and governance over who belongs to which teams and
who holds team-administrator access.

## Capabilities

| Resource        | Sync                                                          | Provision |
| --------------- | ------------------------------------------------------------- | --------- |
| Users           | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Teams           | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Team membership | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Team admins     | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |

The connector reads the users in your Sysdig account, the teams in that account,
which users belong to which teams, and whether each member is a team
administrator. Each user's organization-wide role (standard user or admin) is
recorded on the user, and each user's enabled or disabled status is reflected in
C1.

## Gather Sysdig credentials

<Warning>
  The connector lists every user and team in your account, which Sysdig only
  allows for tokens with **admin** rights. Use an admin user's API token or an
  admin team service-account token. A non-admin token cannot read the full user
  and team lists.
</Warning>

<Steps>
  <Step>
    Sign in to Sysdig at your regional URL (for example
    `https://us2.app.sysdig.com`). The host you sign in to is your base URL.
  </Step>

  <Step>
    As an administrator, open **Settings**. For a non-human, automation-friendly
    credential, go to **Service Accounts** and create an admin-scoped service
    account; otherwise use **Sysdig Secure API** / **Sysdig Monitor API** to
    copy your personal API token.
  </Step>

  <Step>
    Copy the token value. You enter it as the **API token** when configuring the
    connector.
  </Step>
</Steps>

## Configure the Sysdig connector

<Tabs>
  <Tab title="Cloud-hosted">
    Follow these instructions to use a built-in, no-code connector hosted by C1.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **Sysdig** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new Sysdig connector.
      </Step>

      <Step>
        Set the owner for this connector.
      </Step>

      <Step>
        Click **Next**.
      </Step>

      <Step>
        Find the **Settings** area of the page and click **Edit**.
      </Step>

      <Step>
        Enter the Sysdig credentials:

        * **Base URL**: your regional Sysdig app host, for example
          `https://us2.app.sysdig.com` (use `us1`, `us2`, `eu1`, or `au1` to
          match your region). Use the `<region>.app.sysdig.com` host, not
          `api.<region>.sysdig.com`.
        * **API token**: the admin API token you copied above.
      </Step>

      <Step>
        Click **Save**.
      </Step>

      <Step>
        The connector's label changes to **Syncing**, followed by **Connected**. You can view the logs to ensure that information is syncing.
      </Step>
    </Steps>

    **Done.** Your Sysdig connector is now pulling access data into C1.
  </Tab>

  <Tab title="Self-hosted">
    Follow these instructions to run the Sysdig connector in your own
    environment.

    <Steps>
      <Step>
        Create a secret for the Sysdig API token.
      </Step>

      <Step>
        Configure the connector environment variables:

        * **BATON\_BASE\_URL**: your regional Sysdig app host, for example
          `https://us2.app.sysdig.com`.
        * **BATON\_API\_TOKEN**: the admin Sysdig API token.
      </Step>

      <Step>
        Deploy the connector using your standard self-hosted connector process.
      </Step>
    </Steps>

    **Done.** Your Sysdig connector is now pulling access data into C1.
  </Tab>
</Tabs>