Skip to main content
Connect Segment to Oleria to see who has access to your Segment workspace: its members, their workspace-level roles, and user groups. Oleria reads identity and access data from the Segment Public API using an API token, so you can see where access is over-provisioned and take action directly from Oleria.

​
What Oleria discovers

Once connected, Oleria continuously discovers and maps the following from your Segment workspace:
  • Accounts - every member of the workspace, with their name and email address. Members who hold the Workspace Owner role are marked as administrators.
  • Roles - Segment’s role catalog, including roles that no one currently holds.
  • User groups - every user group and its members.
  • Role assignments - which accounts and user groups hold which workspace-level roles.
Segment can scope a role to a single resource, such as one source, instead of the whole workspace. Oleria maps workspace-level role assignments only.

​
Prerequisites

  • A Segment workspace on a Team or Business plan. Segment offers its Public API, which Oleria uses, only on those plans.
  • A Segment account with the Workspace Owner role. Only Workspace Owners can create Public API tokens.
  • A workspace in Segment’s US region. Workspaces in the EU region aren’t supported.
  • Admin access to the Oleria workspace

​
Create an API token in Segment

1

Open Access Management

Sign in to Segment as a Workspace Owner, then select Settings -> Workspace settings -> Access Management -> Tokens.
2

Create a token

Select + Create Token and enter a description, for example Oleria Integration.
3

Assign Workspace Owner access

Assign the token Workspace Owner access, then select Create.
Workspace Owner access gives the token full read and edit access to everything in your Segment workspace, which covers everything Oleria reads. Create a token just for Oleria and store it securely.
4

Copy the token

Copy the token somewhere secure, then select Done.
If you lose the token, create a new one and update the integration in Oleria.

​
Connect Segment to Oleria

1

Open the integration

Go to your Oleria workspace, select Integrations -> select Segment.
2

Complete the connection form

Select Continue and provide the following:
3

Confirm the connection

Select Authenticate to validate the token. Oleria checks that the token can read your workspace, users, roles, and user groups, and rejects it if it can’t read all four. Find the newly connected Segment workspace on the Connected tab of your Oleria Integrations page.

​
Verify the integration

Confirm the Segment workspace appears on the Connected tab of your Oleria Integrations page. After the first sync completes, you can review the discovered accounts, roles, and user groups in your Oleria workspace.
If you revoke or replace the token in Segment, update it in Oleria by editing the integration. A revoked token causes the sync to fail.

​
Contact us

For questions about this integration, contact us at support@oleria.com.