# Universal Secrets Sync using the Vault

### Overview

This guide covers how to trigger and confirm a Universal Secrets Sync (USS) sync operation from the Keeper Vault user interface.

{% hint style="info" %}
Before proceeding, review the [Universal Secrets Sync Basics](/keeperpam/privileged-access-manager/universal-secrets-sync/discovery-basics.md) documentation to ensure your PAM Configuration and Keeper Gateway are set up correctly.
{% endhint %}

### Automatic Sync

When **Dry-run** is not enabled on the PAM configuration, USS runs automatically whenever a Keeper record in a configured folder is created or updated. No manual action is required from the Vault UI.

### Dry Run Mode

When **Dry-run** is selected, changes are not pushed to the cloud provider until you explicitly approve them. To trigger a manual sync from the Vault:

Navigate to one of the Shared Folders of the USS configuration and select “Push Updates”:

<img src="/files/1N9TKmN5EhQOLcyLz2Qr" alt="" height="465" width="704">

Review the list of secrets that will be created or updated in the cloud provider.

Click **Sync Now** to confirm and push the changes.

<img src="/files/4aqek2li1JgWrrpKhwuj" alt="" height="451" width="704">


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.keeper.io/keeperpam/privileged-access-manager/universal-secrets-sync/discovery-using-the-vault.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.