Skip to main content
Coda (now Superhuman Docs) is a collaborative docs platform. Connect your Coda Enterprise organization to Oleria to see who has access across it: every user, the workspaces and groups they belong to, the role they hold in each workspace, the API tokens they’ve created, and what they’ve done recently. Oleria reads this data from the Coda Admin API.

​
What Oleria discovers

Once connected, Oleria continuously discovers and maps the following from your Coda organization:
  • Accounts - every user in your organization’s domains, active and deactivated, with email, workspace roles, license level, and last activity. Workspace members from outside your organization’s domains appear as external accounts.
  • Groups - Coda workspaces and the groups provisioned from your identity provider, with their members.
  • Roles - an Admin, Doc Maker, and Editor role for each workspace, and an Organization Admin role, with the accounts that hold each one.
  • Non-human identities - API tokens created by your users, with their owner, creation date, and last use.
  • Activity - events from the Coda audit log, such as sign-ins, role and permission changes, and API token changes.
Oleria uses this data for dormant account detection, access reviews, and non-human identity discovery, refreshed on Oleria’s regular sync schedule.
This integration doesn’t read docs, folders, or doc sharing, so it doesn’t populate resource-level Access Graph or Access Inventory data. Coda’s API doesn’t list organization admins, so the Organization Admin role shows only the admin whose API token you connect. Coda doesn’t expose MFA or SSO settings, custom agents, or Pack connections through its API. Oleria reads at most the last 12 months of Coda audit log activity.

​
Prerequisites

  • A Coda organization on the Enterprise plan. Coda’s Admin API, and the workspace and user data this integration reads, aren’t available to workspaces outside an Enterprise organization.
  • A Coda organization admin to create the API token below.
  • Admin access on the Oleria platform to add a new integration.
The exact location of these settings can change over time. If the steps below don’t match what you see, refer to Coda’s own API documentation.

​
Create a Coda API token

Oleria connects with an API token created by one of your organization admins. The token acts with that admin’s permissions.
1

Open your account settings

Sign in to Coda as an organization admin and open Account settings.
2

Generate the token

Under API settings, select Generate API token. Give it a name such as Oleria.
Don’t restrict the token to specific docs or tables. A restricted token can’t use the Admin API, and Oleria rejects it when you connect.
3

Copy the token

Copy the token. Coda shows it only once, so store it securely until you’ve finished connecting.
Create the token from a dedicated admin account if you can. Oleria won’t deactivate the admin whose token it uses, or revoke that token, because either action would disconnect the integration.

​
Find your organization ID (optional)

You only need an organization ID if the admin who created the token administers more than one Coda organization. Otherwise, Oleria finds the organization automatically. If you need it and don’t know it, select Authenticate with the field blank. Oleria’s error message lists each organization the token can administer with its ID, for example org-1AbcdeFgh1 (Acme Corp). Copy the one you want into Organization ID.

​
Connect Coda to Oleria

1

Open the integration

Go to your Oleria workspace, select Integrations, then select the Coda tile.
2

Complete the connection form

Fill in the connection form:
3

Save the integration

Select Authenticate. Oleria checks that the token is unrestricted, that its owner is an organization admin, and that it can read users, workspaces, groups, and API tokens, then saves the integration.

​
Verify the integration

Confirm the new instance appears on the Connected tab of your Oleria Integrations page with a status of Healthy. Oleria syncs users, workspaces, groups, roles, API tokens, and activity from Coda on its regular sync schedule once the initial sync completes.
To rotate the API token, edit the integration and enter the new token. Leave the field blank to keep the token already stored. The organization ID can’t be changed after you connect; to connect a different organization, add a new integration.

​
Remediation actions

Beyond discovery, Oleria can act on Coda access to remediate risk. Every action uses the organization admin permissions of the connected API token.
Groups provisioned from your identity provider can’t be changed through Coda, so add or remove those members in your identity provider. The Organization Admin role has no Coda API for changes, so Oleria shows it but can’t assign or remove it.
If your identity provider still assigns a user that Oleria deactivates, it may reactivate them on its next SCIM sync. Deprovision the user in your identity provider too.

​
Contact us

For questions about this integration, contact us at support@oleria.com.