Access Insights

Explore who has access to what, find separation-of-duties conflicts, and run access certifications.

Identity & access

Access Insights is an identity hub built from your synced directory data. It includes a Graph Explorer for visualizing identity-to-resource relationships, a Separation-of-Duties (SoD) matrix, peer-group and role-mining analysis, just-in-time access requests, joiner/mover/leaver (JML) automation, and access certification campaigns.

How to use it

  1. Open Access Insights from the sidebar. The default Graph Explorer view maps identities to the groups, roles, and resources they can reach.

  2. Switch to the SoD Matrix tab to surface toxic combinations of access that violate separation-of-duties policies.

  3. Use Peer-Group Analysis to spot identities whose access deviates from their peers — a common signal of access creep.

  4. Run Certifications to launch a review campaign where managers attest to (or revoke) their reports' access.

  5. Use Access Requests and JML Automation to manage just-in-time grants and automatically adjust access as people join, move, or leave.

Tips

  • Define your SoD policies under Settings → SoD Policies so the matrix knows which combinations to flag.

Open Access Insights in the app

Jump straight to the feature, or browse the rest of the guides.