# Oleria Identity Security

- [Oleria Identity Security](https://docs.oleria.com/introduction/overview.md): The AI-native identity intelligence layer for speed, scale, and security.
- [Oleria AI](https://docs.oleria.com/posture/oleria-ai.md): Ask questions about your identity security posture in natural language and get immediate, context-specific answers from Oleria AI.
- [Connect to Oleria MCP](https://docs.oleria.com/introduction/oleria-mcp-setup.md): Connect Claude, ChatGPT, or any MCP-compatible AI client to your Oleria workspace, and ask questions about your identity and access data without leaving that client.
- [Oleria MCP tools](https://docs.oleria.com/introduction/oleria-mcp-tools.md): The tools Oleria MCP exposes to your AI client, and the metrics reference for pre-aggregated posture data.
- [What you can ask Oleria MCP](https://docs.oleria.com/introduction/oleria-mcp-examples.md): Example questions you can ask Oleria MCP, organized by the five areas of identity and access data it covers.
- [Adaptive Security](https://docs.oleria.com/posture/oleria-adaptive-security-overview.md): Understand how Oleria gives you centralized visibility and control over identity and access across all your SaaS and IAM systems.
- [Risk Monitoring](https://docs.oleria.com/posture/risk-monitoring-overview.md): Track identity and access risks across your connected applications in real time, with SLA visibility, detailed context per risk, and remediation actions.
- [Access Graph](https://docs.oleria.com/posture/access-graph-overview.md): Visualize who has access to what across your entire environment, trace how that access was granted, and identify and remediate over-privileged accounts.
- [Read the Access Graph](https://docs.oleria.com/posture/explore-access-graph.md): Understand the nodes, edges, node details, activity overlay, and Entitlement Graph that make up the Access Graph.
- [Navigate and search the Access Graph](https://docs.oleria.com/posture/navigate-access-graph.md): Search the Access Graph to find a starting point, then trace access paths from an account to its resources or from a resource back to every account that can reach it.
- [Activity Analysis](https://docs.oleria.com/posture/activity-analysis-overview.md): Monitor account activity across your integrated applications to detect suspicious behavior, investigate incidents, and respond faster.
- [Activity dashboard](https://docs.oleria.com/posture/activity-dashboard.md)
- [Activity details](https://docs.oleria.com/posture/activity-details.md)
- [Access Inventory](https://docs.oleria.com/posture/access-inventory-overview.md): Consolidate identity data from all your connected platforms into a single, searchable view of who has access to what.
- [Using Access Inventory](https://docs.oleria.com/posture/learn-access-inventory.md)
- [Overview](https://docs.oleria.com/posture/workflows-overview.md): Automate recurring identity and access actions with configurable triggers, conditions, and approval steps, built from a template you can customize.
- [Workflow templates](https://docs.oleria.com/posture/workflow-templates.md): A library of ready-made workflow templates for common identity and access automation.
- [Disable dormant accounts](https://docs.oleria.com/posture/disable-dormant-accounts-workflow.md): Automatically find accounts inactive beyond a set threshold and disable them, with a required manager approval step first.
- [Security insights email](https://docs.oleria.com/posture/security-insights-email-workflow.md): Deliver a recurring summary of security and activity insights to stakeholders on a schedule.
- [Enforce MFA compliance](https://docs.oleria.com/posture/enforce-mfa-compliance-workflow.md): Detect users missing multi-factor authentication (MFA) on configured apps, escalate to their manager, and notify.
- [Manage stale SharePoint sites](https://docs.oleria.com/posture/manage-stale-sharepoint-sites-workflow.md): Identify SharePoint sites with low activity, route them to site owners for approval, and act on the outcome.
- [NHI ownership assignment](https://docs.oleria.com/posture/nhi-ownership-assignment-workflow.md): Continuously discover unowned non-human identities (NHIs), assign an owner, and optionally route the assignment to a reviewer before applying it.
- [NHI credential expiry](https://docs.oleria.com/posture/nhi-credential-expiry-workflow.md): Notify NHI owners before a credential expires, and escalate to a manager or admin if it isn't rotated in time.
- [NHI review](https://docs.oleria.com/posture/nhi-review-workflow.md): Periodically review non-human identities and decide whether each one should stay active or be disabled, with reviews routed to owners and escalated automatically if nothing happens by the due date.
- [Detect and report Shadow IT](https://docs.oleria.com/posture/detect-report-shadow-it-workflow.md): Identify newly detected shadow IT applications and create incident tickets in your connected ITSM tool automatically.
- [Access Requests](https://docs.oleria.com/governance/access-requests.md): Let employees request access to applications and groups, route each request through an approval chain, and grant access automatically once it's approved.
- [Approval Chains](https://docs.oleria.com/governance/approval-chains.md): Define the sequence of approvals every access request must clear, from manual review to automatic and webhook-driven decisions.
- [SSO Applications](https://docs.oleria.com/governance/sso-applications.md): Make the applications your identity provider federates requestable, so approved requests grant access through your existing single sign-on groups.
- [Integrated Applications](https://docs.oleria.com/governance/integrated-applications.md): Make applications you have already connected to Oleria requestable, with groups and roles provisioned directly in the application.
- [Custom Access](https://docs.oleria.com/governance/custom-access.md): Make anything requestable - an internal tool, an unintegrated application, or any action a webhook or an admin can perform - with the same approvals and audit trail.
- [Access Reviews](https://docs.oleria.com/governance/access-review.md)
- [Employee access insights](https://docs.oleria.com/governance/employee-access-insights.md): Export the access review insights and recommendations Oleria computes for every employee and application, without launching an access review campaign.
- [Account Hygiene](https://docs.oleria.com/governance/account-hygiene-overview.md): Identify dormant, over-privileged, and misconfigured accounts across your connected applications to reduce your attack surface and maintain compliance.
- [Password age](https://docs.oleria.com/governance/last-password-change-insights.md)
- [Application Hygiene](https://docs.oleria.com/governance/application-hygiene-overview.md): Discover shadow IT applications - the unsanctioned apps your users access outside your approved software catalog - and assess their risk before they become a vulnerability.
- [Dormancy thresholds](https://docs.oleria.com/governance/account-dormant-days.md)
- [Joiner](https://docs.oleria.com/governance/employee-lifecycle-joiner.md): Automate employee onboarding by provisioning accounts and access when a new hire is detected in your HR system, or by manually entering employees to onboard on demand.
- [Mover](https://docs.oleria.com/governance/employee-lifecycle-mover.md): Automate access changes when employees change roles - grant new-role access and revoke previous-role access using Access Bundles, automatically or on demand.
- [Leaver](https://docs.oleria.com/governance/employee-lifecycle-leaver.md): Automate employee offboarding by revoking access when a departure is detected in your HR system, or by manually entering employees to offboard on demand.
- [Access Bundles](https://docs.oleria.com/governance/access-bundles-and-adaptive-recommendations.md): Define the access each employee population should have, and let Oleria keep it current based on what peers actually hold and use.
- [Access Bundle Presets](https://docs.oleria.com/governance/access-bundle-presets.md): Bulk-create Access Bundles from your organization's employee attributes - Oleria generates candidate bundles from your real workforce data and you choose which to create.
- [External access](https://docs.oleria.com/governance/external-access.md)
- [Group Hygiene](https://docs.oleria.com/governance/group-hygiene-overview.md): Identify inactive group members and unused groups across your connected applications to reduce your attack surface and access management overhead.
- [Remediations](https://docs.oleria.com/governance/remediations-overview.md): Take direct action on identity risks from within Oleria - disable dormant accounts, revoke external access, and remove group members with minimal manual effort.
- [View remediation actions](https://docs.oleria.com/governance/view-remediation-actions.md): Track remediation actions submitted in Oleria, view action status, and roll back changes within 7 days using Action Center.
- [Disable dormant accounts](https://docs.oleria.com/governance/disable-dormant-accounts.md): Disable dormant user accounts across Google Workspace, Entra ID, Okta, PingOne, Salesforce, and ServiceNow directly from Oleria to reduce your attack surface.
- [Revoke external user access](https://docs.oleria.com/governance/revoke-external-users-access-permissions.md): Remove unwanted external user access to your organization's assets directly from Oleria, with support for Microsoft SharePoint.
- [Remove an account from a group](https://docs.oleria.com/governance/remove-account-from-group.md)
- [User management](https://docs.oleria.com/administration/user-management-overview.md): Manage who has access to your Oleria workspace - add users, assign roles, and control permissions across your team.
- [Default user roles](https://docs.oleria.com/administration/default-user-roles.md)
- [Manage users](https://docs.oleria.com/administration/manage-users.md)
- [Update a user's role](https://docs.oleria.com/administration/update-a-users-role.md)
- [Remove a user](https://docs.oleria.com/administration/remove-a-user.md)
- [SCIM user provisioning](https://docs.oleria.com/administration/scim-user-provisioning.md): Provision and deprovision Oleria workspace users and groups automatically from your identity provider using the SCIM 2.0 API.
- [Governance App SCIM provisioning](https://docs.oleria.com/administration/scim-governance-provisioning.md): Provision and deprovision Governance App users automatically from your identity provider using Oleria's governance SCIM 2.0 endpoint.
- [User attributes](https://docs.oleria.com/administration/user-attributes.md): Reference for the user attributes shown in Oleria's User Management page, including identity, status, and onboarding fields.
- [User profile settings](https://docs.oleria.com/administration/user-profile-settings.md)
- [Business rules](https://docs.oleria.com/administration/workspace-settings-business-rules.md)
- [Authentication methods](https://docs.oleria.com/administration/authentication-methods.md)
- [SSO configuration](https://docs.oleria.com/administration/sso-configuration.md): Let workspace users sign in with your identity provider using SAML single sign-on or social login, and provision governance reviewers automatically.
- [Okta: end-to-end SSO and SCIM setup](https://docs.oleria.com/administration/okta-sso-scim-setup.md): Connect Okta to Oleria for single sign-on and user provisioning, covering both the Main Workspace and the Governance App.
- [Microsoft Entra ID: end-to-end SSO and SCIM setup](https://docs.oleria.com/administration/entra-sso-scim-setup.md): Connect Microsoft Entra ID to Oleria for single sign-on and SCIM provisioning, covering both the Main Workspace and the Governance App, and Entra's one-Entity-ID-per-app rule.
- [Email notifications](https://docs.oleria.com/administration/email-notifications.md)
- [Webhooks](https://docs.oleria.com/administration/webhooks.md): Let your own systems decide and fulfill Oleria access requests by responding to a signed HTTPS call in real time.
- [Ticketing](https://docs.oleria.com/workspace/ticketing-overview.md): Create and manage tickets in Jira or ServiceNow directly from risks and posture insights in Oleria.
- [Audit log](https://docs.oleria.com/governance/audit-log-overview.md): Request a full, exportable record of every change made in your Oleria workspace - user actions, integration changes, and remediations - for incident investigation and compliance.
- [Support](https://docs.oleria.com/support/overview.md)
- [Help](https://docs.oleria.com/support/help.md)
- [Integrations overview](https://docs.oleria.com/integrations/overview.md): Connect your identity providers, HR systems, cloud infrastructure, and SaaS apps to Oleria so it can build a continuously updated map of access across your environment.
- [All integrations](https://docs.oleria.com/integrations/directory.md): Browse all Oleria integrations by category, from identity providers and HR systems to cloud infrastructure and SaaS apps.
- [Integration Studio](https://docs.oleria.com/integrations/integration-studio.md): Connect any app that has a documented API. An AI research agent reads the API, drafts a connector manifest, and hands it to you to review and connect.
- [SCIM Connector](https://docs.oleria.com/integrations/scim.md): Connect any application that supports SCIM 2.0 to Oleria to discover its users and groups.
- [Custom Application](https://docs.oleria.com/integrations/custom-application.md): Bring any system without a native integration into Oleria by uploading its access data as CSV files to an S3 bucket.
- [1Kosmos](https://docs.oleria.com/integrations/1kosmos.md): Connect your 1Kosmos BlockID community to Oleria to continuously discover users, their AdminX roles and administrators, and identity activity.
- [Active Directory](https://docs.oleria.com/integrations/active-directory.md): Set up a read-only service account and the Oleria AD agent to discover Active Directory users and, optionally, Windows security events.
- [CyberArk Identity](https://docs.oleria.com/integrations/cyberark.md): Connect your CyberArk Identity tenant to Oleria to continuously discover users, roles, administrative rights, and identity events, and take remediation actions directly from Oleria.
- [Google Admin and Drive](https://docs.oleria.com/integrations/google-workspace.md): Grant domain-wide delegation so Oleria can discover Google Admin users and groups and Google Drive sharing.
- [JumpCloud](https://docs.oleria.com/integrations/jumpcloud.md): Connect your JumpCloud directory to Oleria to continuously discover and map who has access across your users, groups, and admin roles.
- [Microsoft Entra ID and M365 SharePoint](https://docs.oleria.com/integrations/microsoft-entra-id.md): Connect Entra ID with OAuth, a client secret, or a certificate so Oleria can discover identities, sign-ins, and SharePoint and OneDrive access.
- [Okta](https://docs.oleria.com/integrations/okta.md): Create an API services app in Okta so Oleria can discover users, groups, admin roles, application access, and system log activity.
- [OneLogin](https://docs.oleria.com/integrations/onelogin.md): Connect your OneLogin (One Identity) tenant to Oleria to continuously discover and map users, groups, roles, applications, and activity, and take remediation actions directly from Oleria.
- [Ping Directory](https://docs.oleria.com/integrations/ping-directory.md): Set up a read-only service account and the Oleria PD agent to discover Ping Directory users and groups, plus optional access activity.
- [PingOne](https://docs.oleria.com/integrations/pingone.md): Create an application in PingOne so Oleria can discover workforce identities and group memberships across your environments.
- [ADP Workforce Now](https://docs.oleria.com/integrations/adp.md): Connect ADP Workforce Now to Oleria to bring employees, departments, and reporting relationships into your identity and access graph as the authoritative worker record.
- [BambooHR](https://docs.oleria.com/integrations/bamboohr.md): Connect BambooHR to Oleria to bring employees, departments, and manager relationships into your identity and access graph as the authoritative worker record.
- [Deel](https://docs.oleria.com/integrations/deel.md): Connect your Deel account to Oleria to continuously discover contractor and employee access across your global payroll platform.
- [greytHR](https://docs.oleria.com/integrations/greythr.md): Connect greytHR to Oleria to bring employee and department data into your identity security platform.
- [HiBob](https://docs.oleria.com/integrations/hibob.md): Connect HiBob to Oleria to bring employees, departments, and manager relationships into your identity and access graph as the authoritative worker record.
- [Oracle HCM](https://docs.oleria.com/integrations/oracle-hcm.md): Connect Oracle HCM Cloud so Oleria can use employee, department, and manager records as the source of truth for who works at your organization.
- [Rippling](https://docs.oleria.com/integrations/rippling.md)
- [SAP Fieldglass](https://docs.oleria.com/integrations/sap-fieldglass.md): Generate a Fieldglass API key so Oleria can tie access held by contingent and external workers back to a worker record.
- [SAP SuccessFactors](https://docs.oleria.com/integrations/sap-success-factors.md): Connect SAP SuccessFactors to Oleria to bring employee and organizational data into your identity security posture.
- [UKG Ready](https://docs.oleria.com/integrations/ukg-ready.md): Connect UKG Ready to Oleria to bring employees, people, departments, manager relationships, and UKG Ready logins into your identity and access graph as the authoritative worker record.
- [Workday](https://docs.oleria.com/integrations/workday.md): Register an API client in Workday so Oleria can match accounts to worker records and flag access held by people who have left.
- [AWS IAM and S3](https://docs.oleria.com/integrations/aws-iam-and-s3.md): Connect an AWS organization or single account through CloudFormation so Oleria can discover IAM, EC2, S3 access, and CloudTrail activity.
- [Azure](https://docs.oleria.com/integrations/azure.md): Connect Azure through an app registration so Oleria can discover RBAC role assignments across management groups, subscriptions, and resources.
- [Google Cloud Platform](https://docs.oleria.com/integrations/gcp.md): Connect a GCP organization or project with a connector service account so Oleria can discover IAM principals, bindings, and audit activity.
- [ChatGPT](https://docs.oleria.com/integrations/chatgpt.md): Connect your ChatGPT workspace to Oleria to continuously discover member and group access across your AI assistant platform.
- [Claude](https://docs.oleria.com/integrations/claude.md): Connect your Claude workspace to Oleria to continuously discover member and group access across your AI assistant platform.
- [Cursor](https://docs.oleria.com/integrations/cursor.md): Connect your Cursor Enterprise team to Oleria to continuously discover team members, billing groups, roles, and audit activity in your AI code editor.
- [Tines](https://docs.oleria.com/integrations/tines.md): Connect your Tines tenant to Oleria to continuously discover user access across your security automation platform.
- [Workato](https://docs.oleria.com/integrations/workato.md): Connect your Workato account to Oleria to continuously discover user access across your integration automation platform.
- [Zapier](https://docs.oleria.com/integrations/zapier.md): Connect your Zapier team to Oleria to continuously discover team member access across your workflow automation platform.
- [Aha!](https://docs.oleria.com/integrations/aha.md): Connect your Aha! workspace to Oleria to continuously discover user and workspace access across your product roadmap platform.
- [Airtable](https://docs.oleria.com/integrations/airtable.md): Connect your Airtable Enterprise account to Oleria to continuously discover and map who has access to your workspaces, bases, and enterprise groups.
- [Asana](https://docs.oleria.com/integrations/asana.md): Connect your Asana organization to Oleria to continuously discover users, teams, roles, AI Teammates, and audit activity across your work management platform.
- [Atlassian Cloud](https://docs.oleria.com/integrations/atlassian-cloud.md): Connect your Atlassian Cloud organization to Oleria to continuously discover and map who has access across your organization.
- [Box](https://docs.oleria.com/integrations/box.md): Connect your Box enterprise to Oleria to continuously discover managed and external users, groups, enterprise roles, folders and who can access them, App Users, AI agents, and admin activity.
- [Calendly](https://docs.oleria.com/integrations/calendly.md): Connect your Calendly organization to Oleria to continuously discover user access across your scheduling platform.
- [ClickUp](https://docs.oleria.com/integrations/clickup.md): Connect your ClickUp workspace to Oleria to continuously discover member and team access across your project management platform.
- [Coda](https://docs.oleria.com/integrations/coda.md): Connect your Coda Enterprise organization to Oleria for visibility into users, workspaces, groups, roles, API tokens, and audit log activity, and to manage workspace access.
- [DocuWare](https://docs.oleria.com/integrations/docuware.md): Connect DocuWare Cloud to Oleria to bring users, groups, roles, and OAuth app registrations from your document management platform into your identity and access graph.
- [Egnyte](https://docs.oleria.com/integrations/egnyte.md): Connect your Egnyte domain to Oleria to continuously discover user and group access across your content collaboration platform.
- [Grammarly](https://docs.oleria.com/integrations/grammarly.md): Connect your Grammarly Business account to Oleria to continuously discover user access across your AI writing assistant platform.
- [Guru](https://docs.oleria.com/integrations/guru.md): Connect your Guru team to Oleria to continuously discover team member and group access across your knowledge management platform.
- [Linear](https://docs.oleria.com/integrations/linear.md): Connect your Linear workspace to Oleria to continuously discover team member access across your issue tracker.
- [Lucid](https://docs.oleria.com/integrations/lucid.md): Connect your Lucid account to Oleria to continuously discover user and group access across your visual collaboration platform.
- [Miro](https://docs.oleria.com/integrations/miro.md): Connect your Miro Enterprise organization to Oleria for visibility into users, teams, user groups, roles, and audit log activity, and to manage team and group access.
- [monday.com](https://docs.oleria.com/integrations/monday.md): Connect your monday.com account to Oleria to continuously discover users, teams, roles, and non-human identities across your Work OS platform.
- [Mural](https://docs.oleria.com/integrations/mural.md): Connect your Mural account to Oleria to continuously discover member and group access across your digital collaboration platform.
- [Notion](https://docs.oleria.com/integrations/notion.md): Connect your Notion workspace to Oleria to continuously discover member access across your collaborative workspace.
- [ShareFile](https://docs.oleria.com/integrations/sharefile.md): Connect ShareFile to Oleria to bring employees, external clients, groups, roles, connected apps, and activity from your file sharing platform into your identity and access graph.
- [Smartsheet](https://docs.oleria.com/integrations/smartsheet.md): Connect Smartsheet to Oleria to bring users, groups, and administrative roles from your work management platform into your identity and access graph.
- [SurveyMonkey](https://docs.oleria.com/integrations/surveymonkey.md): Connect your SurveyMonkey team to Oleria to continuously discover user access across your survey platform.
- [Trello](https://docs.oleria.com/integrations/trello.md): Connect a Trello organization with OAuth or an API key so Oleria can discover board access, including guests and public boards.
- [Workvivo](https://docs.oleria.com/integrations/workvivo.md): Connect your Workvivo domain to Oleria to continuously discover user access across your employee experience platform.
- [Wrike](https://docs.oleria.com/integrations/wrike.md): Connect your Wrike account to Oleria to continuously discover team member and group access across your project management platform.
- [8x8](https://docs.oleria.com/integrations/eight-x-eight.md): Connect your 8x8 account to Oleria to continuously discover user access across your communications platform.
- [AlertMedia](https://docs.oleria.com/integrations/alertmedia.md): Connect your AlertMedia account to Oleria to continuously discover user and group access across your emergency communication platform.
- [Dialpad](https://docs.oleria.com/integrations/dialpad.md): Connect your Dialpad account to Oleria to continuously discover user and group access across your business communications platform.
- [Genesys Cloud](https://docs.oleria.com/integrations/genesys-cloud.md): Connect your Genesys Cloud organization to Oleria to continuously discover user, group, and role access across your contact center platform.
- [GoTo](https://docs.oleria.com/integrations/goto.md): Connect your GoTo account to Oleria to continuously discover user and group access across your unified communications platform.
- [RingCentral](https://docs.oleria.com/integrations/ringcentral.md): Connect your RingCentral account to Oleria to continuously discover user and group access across your business communications platform.
- [Slack](https://docs.oleria.com/integrations/slack.md): Connect your Slack workspace or Enterprise Grid organization to Oleria to continuously discover and map who has access across your channels, user groups, files, and workspaces.
- [Twilio](https://docs.oleria.com/integrations/twilio.md): Connect your Twilio account to Oleria to continuously discover user access across your communications platform.
- [Vimeo](https://docs.oleria.com/integrations/vimeo.md): Connect your Vimeo account to Oleria to continuously discover team member access across your video hosting platform.
- [Amplitude](https://docs.oleria.com/integrations/amplitude.md): Connect your Amplitude organization to Oleria to continuously discover user access across your product analytics platform.
- [Databricks](https://docs.oleria.com/integrations/databricks.md): Connect your Databricks account to Oleria to continuously discover users, groups, Unity Catalog access, and job-run activity across every workspace.
- [Fivetran](https://docs.oleria.com/integrations/fivetran.md): Connect Fivetran to Oleria to bring user, team, and role standing from your data-integration platform into your identity and access graph.
- [Heap](https://docs.oleria.com/integrations/heap.md): Connect your Heap account to Oleria to continuously discover user access across your product analytics platform.
- [Informatica](https://docs.oleria.com/integrations/informatica.md): Connect your Informatica account to Oleria to continuously discover user access across your data integration platform.
- [Microsoft SQL Server](https://docs.oleria.com/integrations/sqlserver.md): Connect self-managed or cloud-managed Microsoft SQL Server so Oleria can discover logins, roles, permissions, and access paths across your databases.
- [MicroStrategy](https://docs.oleria.com/integrations/microstrategy.md): Connect your MicroStrategy instance to Oleria to continuously discover user and group access across your business intelligence platform.
- [Mixpanel](https://docs.oleria.com/integrations/mixpanel.md): Connect your Mixpanel account to Oleria to continuously discover user access across your product analytics platform.
- [MongoDB](https://docs.oleria.com/integrations/mongodb.md): Connect your MongoDB organization to Oleria to continuously discover user and role access across your cloud database platform.
- [Pendo](https://docs.oleria.com/integrations/pendo.md): Connect your Pendo account to Oleria to continuously discover user access across your product engagement platform.
- [PostgreSQL](https://docs.oleria.com/integrations/postgresql.md): Connect self-hosted or cloud-managed PostgreSQL so Oleria can discover roles, grants, and access paths across your databases.
- [Segment](https://docs.oleria.com/integrations/segment.md): Connect Segment to Oleria to bring workspace members, roles, and user groups from your customer data platform into your identity and access graph.
- [Sigma Computing](https://docs.oleria.com/integrations/sigma-computing.md): Connect your Sigma Computing organization to Oleria to continuously discover user and role access across your cloud analytics platform.
- [Snowflake](https://docs.oleria.com/integrations/snowflake.md): Run the Oleria setup script in Snowflake so Oleria can discover users, roles, and role memberships and generate risks and SSO insights.
- [Spotfire](https://docs.oleria.com/integrations/spotfire.md): Connect your Spotfire deployment to Oleria to continuously discover user access across your analytics platform.
- [Tableau Cloud](https://docs.oleria.com/integrations/tableau-cloud.md): Connect a Tableau Cloud site so Oleria can discover access to projects, workbooks, and data sources, including inherited permissions.
- [ThoughtSpot](https://docs.oleria.com/integrations/thoughtspot.md): Connect your ThoughtSpot instance to Oleria to continuously discover user, group, and role access across your analytics platform.
- [Canva](https://docs.oleria.com/integrations/canva.md): Connect your Canva organization to Oleria to continuously discover team member and group access across your design platform.
- [Contentful](https://docs.oleria.com/integrations/contentful.md): Connect your Contentful organization to Oleria to continuously discover member access across your headless CMS platform.
- [Figma](https://docs.oleria.com/integrations/figma.md): Connect Figma to Oleria to bring users, seat types, admins, and SCIM groups from your design platform into your identity and access graph.
- [InVision](https://docs.oleria.com/integrations/invision.md): Connect your InVision team to Oleria to continuously discover member and group access across your design platform.
- [Sketch](https://docs.oleria.com/integrations/sketch.md): Connect your Sketch workspace to Oleria to continuously discover team member access across your design platform.
- [Apple Developer Program](https://docs.oleria.com/integrations/apple-developer-program.md): Connect your Apple Developer Program team to Oleria for visibility into team members, pending invitations, and App Store Connect roles, and to change roles or remove members.
- [BrowserStack](https://docs.oleria.com/integrations/browserstack.md): Connect your BrowserStack account to Oleria to continuously discover user access across your browser and device testing platform.
- [GitHub](https://docs.oleria.com/integrations/github.md): Install the Oleria Connector GitHub App so Oleria can discover organization members, teams, and repository access.
- [GitLab](https://docs.oleria.com/integrations/gitlab.md): Connect your GitLab group to Oleria to continuously discover members, projects, roles, non-human identities, and activity across your DevSecOps platform.
- [Harness](https://docs.oleria.com/integrations/harness.md): Connect your Harness account to Oleria to continuously discover user, group, and role access across your software delivery platform.
- [Jenkins](https://docs.oleria.com/integrations/jenkins.md): Connect a self-managed Jenkins controller to Oleria to discover its users, roles, permissions, and administrators, and manage role membership.
- [JFrog](https://docs.oleria.com/integrations/jfrog.md): Connect your JFrog instance to Oleria to continuously discover user, group, and role access across your DevOps artifact platform.
- [LaunchDarkly](https://docs.oleria.com/integrations/launchdarkly.md): Connect your LaunchDarkly account to Oleria to continuously discover and map who has access across your projects, environments, and feature flags.
- [Postman](https://docs.oleria.com/integrations/postman.md): Connect your Postman team to Oleria to continuously discover team member access across your API development platform.
- [Pulumi](https://docs.oleria.com/integrations/pulumi.md): Connect your Pulumi organization to Oleria to continuously discover member and team access across your infrastructure as code platform.
- [SonarQube](https://docs.oleria.com/integrations/sonarqube.md): Connect your SonarQube instance to Oleria to continuously discover user and group access across your code quality platform.
- [Airbase](https://docs.oleria.com/integrations/airbase.md): Connect your Airbase account to Oleria to continuously discover user access across your spend management platform.
- [Coupa](https://docs.oleria.com/integrations/coupa.md): Create an OAuth client in Coupa so Oleria can discover Coupa users, groups, and roles.
- [DocuSign](https://docs.oleria.com/integrations/docusign.md): Connect DocuSign through Individual Consent so Oleria can discover users, permission profiles, and access across your DocuSign organization.
- [Expensify](https://docs.oleria.com/integrations/expensify.md): Connect Expensify to Oleria to bring workspace members, workspace roles, and workspaces from your expense management platform into your identity and access graph.
- [Filevine](https://docs.oleria.com/integrations/filevine.md): Connect your Filevine org to Oleria for visibility into users, org access levels, teams, and audit report activity, and to remove users from the org.
- [Navan](https://docs.oleria.com/integrations/navan.md): Connect your Navan account to Oleria to continuously discover user access across your travel and expense management platform.
- [NetSuite](https://docs.oleria.com/integrations/netsuite.md): Connect your Oracle NetSuite account to Oleria to continuously discover users, roles, groups, access tokens, and login activity across your ERP.
- [PayPal Braintree](https://docs.oleria.com/integrations/braintree.md): Connect your PayPal Braintree account to Oleria to continuously discover user access across your payment platform.
- [Ramp](https://docs.oleria.com/integrations/ramp.md): Connect Ramp to Oleria to bring users, roles, departments, locations, and audit activity from your spend management platform into your identity and access graph.
- [Sage Intacct](https://docs.oleria.com/integrations/sage-intacct.md): Set up a Web Services user and a Sage developer app so Oleria can discover Sage Intacct users, roles, and user groups.
- [SAP Ariba](https://docs.oleria.com/integrations/sap-ariba.md): Connect SAP Ariba so Oleria can discover users, supplier users, groups, and audit activity in your Ariba realm, and deactivate users or change group membership.
- [SAP Concur](https://docs.oleria.com/integrations/sap-concur.md): Create an OAuth 2.0 application in SAP Concur so Oleria can discover users and their Spend Role Extension role assignments.
- [Zip](https://docs.oleria.com/integrations/zip.md): Connect Zip to Oleria to bring users, permission groups, approval roles, departments, subsidiaries, and audit activity from your procurement platform into your identity and access graph.
- [Zoho Books](https://docs.oleria.com/integrations/zoho-books.md): Connect Zoho Books to Oleria to bring users and roles from your accounting organization into your identity and access graph.
- [Oracle Cerner](https://docs.oleria.com/integrations/cerner.md): Connect Oracle Health (Cerner) Millennium to Oleria to inventory who holds a Millennium sign-in and which positions each user holds.
- [Envoy](https://docs.oleria.com/integrations/envoy.md): Connect your Envoy account to Oleria to continuously discover employee access across your workplace platform.
- [Freshservice](https://docs.oleria.com/integrations/freshservice.md): Connect your Freshservice domain to Oleria to continuously discover agent and group access across your IT service management platform.
- [Iru](https://docs.oleria.com/integrations/iru.md): Connect Iru (formerly Kandji) to Oleria to discover the users of your Iru tenant and the administrative activity in its audit log.
- [OTRS](https://docs.oleria.com/integrations/otrs.md): Create a bearer token for the OTRS or Znuny webservice so Oleria can discover help desk agents and the groups and roles that grant their access.
- [Robin](https://docs.oleria.com/integrations/robin.md): Connect your Robin account to Oleria to continuously discover user access across your workplace scheduling platform.
- [ServiceNow](https://docs.oleria.com/integrations/servicenow.md): Install the Oleria update set in ServiceNow so Oleria can discover users, groups, and role assignments in your instance.
- [SolarWinds](https://docs.oleria.com/integrations/solarwinds.md): Connect your SolarWinds instance to Oleria to continuously discover user access across your IT management platform.
- [Splashtop](https://docs.oleria.com/integrations/splashtop.md): Connect Splashtop to Oleria to continuously discover team users, roles, groups, and sign-in activity across your remote access platform.
- [Bugsnag](https://docs.oleria.com/integrations/bugsnag.md): Connect your Bugsnag organization to Oleria to continuously discover user access across your error monitoring platform.
- [Datadog](https://docs.oleria.com/integrations/datadog.md): Connect your Datadog organization to Oleria for full visibility into users, roles, and teams, plus the non-human identity credential surface across your Datadog organization.
- [New Relic](https://docs.oleria.com/integrations/new-relic.md): Connect your New Relic account to Oleria to continuously discover user and group access across your observability platform.
- [PagerDuty](https://docs.oleria.com/integrations/pagerduty.md): Connect your PagerDuty account to Oleria to continuously discover and map who has access across your teams, services, and escalation policies.
- [Rollbar](https://docs.oleria.com/integrations/rollbar.md): Connect your Rollbar account to Oleria to continuously discover and map who has access across your teams and projects.
- [Sentry](https://docs.oleria.com/integrations/sentry.md): Connect your Sentry organization to Oleria to continuously discover team member access across your application monitoring platform.
- [Sumo Logic](https://docs.oleria.com/integrations/sumo-logic.md): Connect your Sumo Logic account to Oleria to continuously discover user access across your log analytics platform.
- [ThousandEyes](https://docs.oleria.com/integrations/thousand-eyes.md): Connect your ThousandEyes account to Oleria to continuously discover user access across your network intelligence platform.
- [15Five](https://docs.oleria.com/integrations/fifteen-five.md): Connect your 15Five account to Oleria to continuously discover user and group access across your performance management platform.
- [Absorb LMS](https://docs.oleria.com/integrations/absorb-lms.md): Connect your Absorb LMS account to Oleria to continuously discover learner and group access across your learning management system.
- [Bonusly](https://docs.oleria.com/integrations/bonusly.md): Connect Bonusly to Oleria to bring employee accounts and admin role standing from your peer-recognition platform into your identity and access graph.
- [Greenhouse](https://docs.oleria.com/integrations/greenhouse.md): Connect your Greenhouse account to Oleria to continuously discover user access across your recruiting platform.
- [Lattice](https://docs.oleria.com/integrations/lattice.md): Connect your Lattice account to Oleria to continuously discover employee access across your people management platform.
- [Lever](https://docs.oleria.com/integrations/lever.md): Connect your Lever account to Oleria to continuously discover user access across your talent acquisition platform.
- [Udemy Business](https://docs.oleria.com/integrations/udemy-business.md): Connect your Udemy Business account to Oleria to continuously discover learner and group access across your online learning platform.
- [AdRoll](https://docs.oleria.com/integrations/adroll.md): Connect your AdRoll account to Oleria to continuously discover user access across your digital advertising platform.
- [Braze](https://docs.oleria.com/integrations/braze.md): Connect your Braze account to Oleria to continuously discover user access across your customer engagement platform.
- [Front](https://docs.oleria.com/integrations/front.md): Connect your Front account to Oleria to continuously discover teammate and group access across your customer communications platform.
- [Gong](https://docs.oleria.com/integrations/gong.md): Connect your Gong account to Oleria to continuously discover user access across your revenue intelligence platform.
- [Highspot](https://docs.oleria.com/integrations/highspot.md): Connect Highspot to Oleria to bring users, groups, group memberships, and audit-event activity from your sales enablement platform into your identity and access graph.
- [HubSpot](https://docs.oleria.com/integrations/hubspot.md): Connect your HubSpot account to Oleria to continuously discover user access across your CRM platform.
- [Intercom](https://docs.oleria.com/integrations/intercom.md): Create an Intercom access token so Oleria can discover teammates, roles, teams, and admin activity in your workspace.
- [Khoros](https://docs.oleria.com/integrations/khoros.md): Connect Khoros Communities to Oleria to bring community members, roles at every scope, and role membership from your online community into your identity and access graph.
- [Salesforce](https://docs.oleria.com/integrations/salesforce.md): Install the Oleria app in Salesforce so Oleria can discover users, profiles, permission sets, and usage in your CRM.
- [SAP CRM](https://docs.oleria.com/integrations/sap-crm.md): Connect SAP Sales Cloud or SAP Service Cloud (Version 2) to Oleria to bring business users, business roles, and role assignments into your identity and access graph.
- [Shopify Plus](https://docs.oleria.com/integrations/shopify-plus.md): Connect your Shopify Plus store to Oleria to continuously discover staff member access across your e-commerce platform.
- [Showpad](https://docs.oleria.com/integrations/showpad.md): Connect your Showpad account to Oleria to continuously discover user and group access across your sales enablement platform.
- [Sprinklr](https://docs.oleria.com/integrations/sprinklr.md): Connect your Sprinklr environment to Oleria to continuously discover user access across your customer experience platform.
- [Zendesk](https://docs.oleria.com/integrations/zendesk.md): Connect your Zendesk instance to Oleria to continuously discover and map who has access across your Zendesk agents, admins, groups, and custom roles.
- [Zoho](https://docs.oleria.com/integrations/zoho.md): Connect your Zoho organization to Oleria to continuously discover user access across your Zoho business software suite.
- [1Password](https://docs.oleria.com/integrations/1password.md): Connect your 1Password account to Oleria to discover users, groups, vault access with permissions, non-human identities, and activity across your secrets manager.
- [AppOmni](https://docs.oleria.com/integrations/appomni.md): Connect your AppOmni account to Oleria to continuously discover user access across your SaaS security platform.
- [Archer](https://docs.oleria.com/integrations/archer.md): Connect your Archer account to Oleria to continuously discover user and group access across your GRC platform.
- [Bitwarden](https://docs.oleria.com/integrations/bitwarden.md): Connect your Bitwarden organization to Oleria to continuously discover user and group access across your password manager.
- [Cato Networks](https://docs.oleria.com/integrations/cato-networks.md): Connect your Cato Networks account to Oleria to continuously discover user access across your SASE network security platform.
- [Cloudflare](https://docs.oleria.com/integrations/cloudflare.md): Connect your Cloudflare account to Oleria to continuously discover user, group, and role access across your network security platform.
- [CrowdStrike Falcon](https://docs.oleria.com/integrations/crowdstrike-falcon.md): Create a Falcon API client so Oleria can discover console users and roles in your CrowdStrike tenant, plus detections as activity.
- [DigiCert](https://docs.oleria.com/integrations/digicert.md): Connect your DigiCert account to Oleria to continuously discover user access across your certificate management platform.
- [Doppler](https://docs.oleria.com/integrations/doppler.md): Connect your Doppler workplace to Oleria to continuously discover user access across your secrets management platform.
- [Druva](https://docs.oleria.com/integrations/druva.md): Connect your Druva account to Oleria to continuously discover user access across your cloud data protection platform.
- [Duo Security](https://docs.oleria.com/integrations/duo-security.md): Connect your Cisco Duo Security account to Oleria to continuously discover and map who has multi-factor authentication access across your applications, administrators, and groups.
- [Huntress](https://docs.oleria.com/integrations/huntress.md): Connect your Huntress account to Oleria to continuously discover user access across your managed security platform.
- [Keeper Security](https://docs.oleria.com/integrations/keeper-security.md): Connect your Keeper Security account to Oleria to continuously discover user, group, and role access across your password and secrets management platform.
- [KnowBe4](https://docs.oleria.com/integrations/knowbe4.md): Connect your KnowBe4 account to Oleria to continuously discover user and group access across your security awareness training platform.
- [LastPass](https://docs.oleria.com/integrations/lastpass.md): Connect your LastPass account to Oleria to continuously discover user and group access across your password management platform.
- [Microsoft Intune](https://docs.oleria.com/integrations/microsoft-intune.md): Connect Microsoft Intune so Oleria can discover who can administer your Intune tenant, through Intune roles, Microsoft Entra roles, and Microsoft Graph permissions.
- [Netskope](https://docs.oleria.com/integrations/netskope.md): Connect your Netskope tenant to Oleria to continuously discover user, group, and role access across your cloud security platform.
- [Proofpoint](https://docs.oleria.com/integrations/proofpoint.md): Connect your Proofpoint tenant to Oleria to continuously discover user access across your email security platform.
- [SailPoint](https://docs.oleria.com/integrations/sailpoint.md): Connect your SailPoint Identity Security Cloud (ISC) tenant to Oleria to continuously discover and map identities, accounts, roles, access profiles, entitlements, governance groups, and activity, and take governance actions directly from Oleria.
- [Tanium](https://docs.oleria.com/integrations/tanium.md): Connect your Tanium Console to Oleria to continuously discover user access across your endpoint management platform.
- [Twingate](https://docs.oleria.com/integrations/twingate.md): Connect your Twingate network to Oleria to continuously discover user, group, and role access across your zero trust network access platform.
- [Vanta](https://docs.oleria.com/integrations/vanta.md): Connect Vanta with OAuth so Oleria can discover Vanta logins and group memberships and run offboarding actions.
- [Wiz](https://docs.oleria.com/integrations/wiz.md): Connect your Wiz organization to Oleria to continuously discover user and role access across your cloud security platform.
- [Zscaler](https://docs.oleria.com/integrations/zscaler.md): Connect your Zscaler tenant to Oleria to continuously discover user, group, and role access across your zero trust security platform.
- [Jira](https://docs.oleria.com/workspace/jira-ticketing.md): Connect Jira to Oleria to create tickets directly from risks and posture findings, automatically populated with risk details and routed to your assignment group.
- [ServiceNow](https://docs.oleria.com/workspace/servicenow-ticketing.md): Connect ServiceNow to Oleria to create incident tickets directly from risks and posture findings.
- [Microsoft Teams](https://docs.oleria.com/workspace/teams-messaging.md): Connect Microsoft Teams to Oleria to receive security alerts and notifications directly in your Teams channels.
- [Slack](https://docs.oleria.com/workspace/slack-messaging.md): Connect Slack to Oleria to receive security alerts and notifications directly in your Slack channels.
- [API Overview](https://docs.oleria.com/developer-docs/api-reference/overview.md)
- [Generate an API Token](https://docs.oleria.com/developer-docs/api-reference/generate-token.md)
- [List](https://docs.oleria.com/api-reference/access-assignments/list.md): Returns a page of access assignments. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria…
- [Get](https://docs.oleria.com/api-reference/access-assignments/get.md): Returns an access assignment by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/account-roles/list.md): Returns a page of account roles. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/r…
- [Get](https://docs.oleria.com/api-reference/account-roles/get.md): Returns an account role by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/accounts/list.md): Returns a page of accounts. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read`…
- [Get](https://docs.oleria.com/api-reference/accounts/get.md): Returns an account by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [Create](https://docs.oleria.com/api-reference/accounts/create.md): Creates an account in the application named by `applicationInstanceId`. This is the one write that carries a body: there is no existing account to address, so the new account's details have to be supplied. The change is applied in the source system asynchronously: this returns a job, and the job rep…
- [Activate](https://docs.oleria.com/api-reference/accounts/activate.md): Activates the account in the application it belongs to, so its owner can sign in. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the `https://devx.{environment}.oleria.io/w…
- [Disable](https://docs.oleria.com/api-reference/accounts/disable.md): Disables the account in the application it belongs to, preventing sign-in while keeping the account and its assignments in place. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requ…
- [Enable](https://docs.oleria.com/api-reference/accounts/enable.md): Re-enables an account that was disabled, restoring the access it had. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the `https://devx.{environment}.oleria.io/write` scope.
- [Revoke active sessions](https://docs.oleria.com/api-reference/accounts/revoke-active-sessions.md): Invalidates the account's session tokens, signing it out everywhere. Disabling an account does not by itself end sessions already in progress, so this is the change that takes effect immediately. The change is applied in the source system asynchronously: this returns a job, and the job reports the o…
- [Remove access to shared resources](https://docs.oleria.com/api-reference/accounts/remove-access-to-shared-resources.md): Removes the access this account holds to resources shared with it. Intended for accounts outside your organization that have been granted access to internal resources. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether th…
- [Delete](https://docs.oleria.com/api-reference/accounts/delete.md): Permanently deletes the account in the application it belongs to. This cannot be undone. Disable the account instead if you may need to restore its access. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target cou…
- [List](https://docs.oleria.com/api-reference/activities/list.md): Returns a page of activities. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Defaults to the most recent 30 days when `from`/`to` ar…
- [Get](https://docs.oleria.com/api-reference/activities/get.md): Returns an activity by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/assigned-applications/list.md): Returns a page of assigned applications. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.ole…
- [Get](https://docs.oleria.com/api-reference/assigned-applications/get.md): Returns an assigned application by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [Grant an account access](https://docs.oleria.com/api-reference/assigned-applications/grant-an-account-access.md): Entitles the account to the application, granting it access. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the `https://devx.{environment}.oleria.io/write` scope.
- [Remove an account's access](https://docs.oleria.com/api-reference/assigned-applications/remove-an-accounts-access.md): Removes the account's entitlement to the application. Access the account holds through a group is unaffected; remove it from the group to revoke that. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be…
- [Grant a group access](https://docs.oleria.com/api-reference/assigned-applications/grant-a-group-access.md): Entitles the group to the application, granting access to every one of its members. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the `https://devx.{environment}.oleria.io…
- [Remove a group's access](https://docs.oleria.com/api-reference/assigned-applications/remove-a-groups-access.md): Removes the group's entitlement to the application, and with it the access every member held through that group. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the `https:/…
- [List](https://docs.oleria.com/api-reference/authenticator-enrollments/list.md): Returns a page of authenticator enrollments. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}…
- [Get](https://docs.oleria.com/api-reference/authenticator-enrollments/get.md): Returns an authenticator enrollment by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/authenticators/list.md): Returns a page of authenticators. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/…
- [Get](https://docs.oleria.com/api-reference/authenticators/get.md): Returns an authenticator by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/department-assignments/list.md): Returns a page of department assignments. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.ol…
- [Get](https://docs.oleria.com/api-reference/department-assignments/get.md): Returns a department assignment by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/department-hierarchy/list.md): Returns a page of department hierarchy edges. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment…
- [Get](https://docs.oleria.com/api-reference/department-hierarchy/get.md): Returns a department hierarchy edge by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/departments/list.md): Returns a page of departments. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/rea…
- [Get](https://docs.oleria.com/api-reference/departments/get.md): Returns a department by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/employees/list.md): Returns a page of employees. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read`…
- [Get](https://docs.oleria.com/api-reference/employees/get.md): Returns an employee by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/enrollment-links/list.md): Returns a page of enrollment links. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.i…
- [Get](https://docs.oleria.com/api-reference/enrollment-links/get.md): Returns an enrollment link by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/impersonation-grants/list.md): Returns a page of impersonation grants. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oler…
- [Get](https://docs.oleria.com/api-reference/impersonation-grants/get.md): Returns an impersonation grant by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/integrated-applications/list.md): Returns a page of integrated applications. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.o…
- [Get](https://docs.oleria.com/api-reference/integrated-applications/get.md): Returns an integrated application by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/managed-via-relationships/list.md): Returns a page of managed-via relationships. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}…
- [Get](https://docs.oleria.com/api-reference/managed-via-relationships/get.md): Returns a managed-via relationship by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/memberships/list.md): Returns a page of memberships. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/rea…
- [Get](https://docs.oleria.com/api-reference/memberships/get.md): Returns a membership by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/non-human-identities/list.md): Returns a page of non-human identities. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Scoped to non-human identities (service princ…
- [Get](https://docs.oleria.com/api-reference/non-human-identities/get.md): Returns a non-human identity by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [Disable](https://docs.oleria.com/api-reference/non-human-identities/disable.md): Disables the service principal, machine account, or token, so anything using its credentials stops being able to authenticate. Check the identity's impersonation blast-radius first: disabling one that other accounts depend on will break them. The change is applied in the source system asynchronously…
- [List](https://docs.oleria.com/api-reference/object-extensions/list.md): Returns a page of object extensions. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.…
- [Get](https://docs.oleria.com/api-reference/object-extensions/get.md): Returns an object extension by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/person-employee-links/list.md): Returns a page of person-employee links. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.ole…
- [Get](https://docs.oleria.com/api-reference/person-employee-links/get.md): Returns a person-employee link by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/persons/list.md): Returns a page of persons. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` s…
- [Get](https://docs.oleria.com/api-reference/persons/get.md): Returns a person by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/reporting-lines/list.md): Returns a page of reporting lines. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io…
- [Get](https://docs.oleria.com/api-reference/reporting-lines/get.md): Returns a reporting line by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/resource-classes/list.md): Returns a page of resource classes. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.i…
- [Get](https://docs.oleria.com/api-reference/resource-classes/get.md): Returns a resource class by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/resource-hierarchy/list.md): Returns a page of resource hierarchy edges. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.…
- [Get](https://docs.oleria.com/api-reference/resource-hierarchy/get.md): Returns a resource hierarchy edge by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List](https://docs.oleria.com/api-reference/resource-instances/list.md): Returns a page of resource instances. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria…
- [Get](https://docs.oleria.com/api-reference/resource-instances/get.md): Returns a resource instance by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [Revoke anonymous access](https://docs.oleria.com/api-reference/resource-instances/revoke-anonymous-access.md): Removes public or link-based access to this resource, so it can only be reached by named accounts. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the `https://devx.{environ…
- [Revoke external sharing](https://docs.oleria.com/api-reference/resource-instances/revoke-external-sharing.md): Revokes access held by people outside your organization to this resource. Every external share found on it is removed, so one request can produce many results. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target…
- [Remove an account's permissions](https://docs.oleria.com/api-reference/resource-instances/remove-an-accounts-permissions.md): Removes the permissions the account holds on this resource. Every permission record found for that account on that resource is removed. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all…
- [List](https://docs.oleria.com/api-reference/roles/list.md): Returns a page of roles. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` sco…
- [Get](https://docs.oleria.com/api-reference/roles/get.md): Returns a role by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [Assign to an account](https://docs.oleria.com/api-reference/roles/assign-to-an-account.md): Assigns the role to the account, granting the permissions the role carries. Already holding the role is not an error. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the `ht…
- [Remove from an account](https://docs.oleria.com/api-reference/roles/remove-from-an-account.md): Removes the role from the account, and with it the permissions the role granted. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the `https://devx.{environment}.oleria.io/wr…
- [List](https://docs.oleria.com/api-reference/user-groups/list.md): Returns a page of user groups. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/rea…
- [Get](https://docs.oleria.com/api-reference/user-groups/get.md): Returns a user group by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [Create](https://docs.oleria.com/api-reference/user-groups/create.md): Creates a group in the application named by `applicationInstanceId`. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the `https://devx.{environment}.oleria.io/write` scope.
- [Add an account](https://docs.oleria.com/api-reference/user-groups/add-an-account.md): Makes the account a member of the group, granting it whatever access the group carries. Already being a member is not an error. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requir…
- [Remove an account](https://docs.oleria.com/api-reference/user-groups/remove-an-account.md): Removes the account's membership of the group, and with it the access the group granted. The account itself is unchanged. The change is applied in the source system asynchronously: this returns a job, and the job reports the outcome, including whether the target could be changed at all. Requires the…
- [List](https://docs.oleria.com/api-reference/action-jobs/list.md): Returns a page of the jobs this tenant has started, most recently started first. Each job is one submitted change and the outcome of applying it. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [Get](https://docs.oleria.com/api-reference/action-jobs/get.md): Returns one job: its status, how many targets it affected, whether Oleria's own data reflects the change yet, and whether it can still be reverted. Poll this after a write until the status is terminal. Requires the `https://devx.{environment}.oleria.io/read` scope.
- [List results](https://docs.oleria.com/api-reference/action-jobs/list-results.md): Returns a page of the job's results, one per target the change was applied to. A job that partly succeeded reports which targets failed and why here: a partial outcome is data to read, not a failed request. One submitted target can produce many results: some changes expand server-side into every rec…
- [Revert](https://docs.oleria.com/api-reference/action-jobs/revert.md): Undoes the change this job applied, where the application it was applied to supports undoing it. Check `revert.available` on the job first: whether a change can be undone depends on that application and on how long ago the change was made. Reverting creates a **new** job, returned here, which report…
- [Validate](https://docs.oleria.com/api-reference/query/validate.md): Parses the SQL query and evaluates it against configured validation rules. Returns `200` if the query passes all rules. Returns `422` with violation details if the query is denied. Does not execute the query.
- [Execute](https://docs.oleria.com/api-reference/query/execute.md): Validates and executes the SQL query. If the query completes within the server-side sync threshold, the response is `200` with inline rows. If not, the response is `202` with a job_id for polling. Clients must always handle both `200` and `202`. Both responses carry a `job_id`; pass it to `GET /v1/q…
- [Get a job](https://docs.oleria.com/api-reference/query/get-a-job.md): Returns the current status of a query job. The job_id from either the `200` or `202` execute response resolves here. When the job is completed, the response includes download references for the result; while it is still running, only the status is returned.
- [List](https://docs.oleria.com/api-reference/saved-query/list.md): Returns a paginated list of saved queries. Supports case-insensitive `contains` filtering, single-field sorting, and cursor pagination. All filter params combine with AND.
- [Create](https://docs.oleria.com/api-reference/saved-query/create.md): Persists a SQL query with authorship and replay metadata. The name must be unique within the tenant (case-insensitive); a conflict returns `409`.
- [Get](https://docs.oleria.com/api-reference/saved-query/get.md): Returns a saved query by its id: the stored SQL, the semantic model it targets, and the authorship and version metadata recorded when it was last written. The `version` in the response is what a subsequent update sends as `expected_version`.
- [Delete](https://docs.oleria.com/api-reference/saved-query/delete.md): Deletes a saved query by its id. Idempotent: the response is `204` whether or not the id existed, so a retried delete is not an error.
- [Update](https://docs.oleria.com/api-reference/saved-query/update.md): Partial update with optimistic concurrency. The caller sends the `expected_version` it last read; a mismatch returns `409` VERSION_CONFLICT. On success `version` is incremented and `last_modified_by` / `last_modified_at` are set.
- [List models](https://docs.oleria.com/api-reference/schema/list-models.md): Returns a list of all semantic models available to the caller. Use this endpoint to discover model names before querying specific model details.
- [Get a model](https://docs.oleria.com/api-reference/schema/get-a-model.md): Returns the full OSI semantic model definition for the given model name, including all datasets, fields, relationships, and metrics. This is the primary endpoint AI agents and BI platforms use to discover the data landscape before generating queries.
- [Working with Downloads](https://docs.oleria.com/developer-docs/api-reference/working-with-downloads.md): The asynchronous request lifecycle, filter and sort grammar, and the full catalog of data contexts available in the Downloads API.
- [Create a download request](https://docs.oleria.com/api-reference/downloads/create-a-download-request.md): Create an asynchronous export for a single resource type. The resource type is chosen by the `context` field — see the `context` field below (`DownloadContext`) for the full list of values and what each one exports. Returns a request `id`; poll `GET /v1/downloads/{id}` until the status is `completed…
- [Get a download request](https://docs.oleria.com/api-reference/downloads/get-a-download-request.md): Poll the status of a download request by id. While processing, `status` is `accepted`. When `status` is `completed`, the response includes a presigned `url` to the CSV result. On failure, `status` is `failed` and `error` is populated.
- [What's new](https://docs.oleria.com/release-notes.md): New features, integrations, and improvements to the Oleria platform.

## OpenAPI Specs

- [downloads-openapi-schema-1.0.0](/developer-docs/api-reference/downloads-openapi-schema-1.0.0.yaml)
- [oleria-public-api-1.0.0](/developer-docs/api-reference/oleria-public-api-1.0.0.yaml)
- [trustfusion-openapi-schema-1.0.0](/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.