See every external user who has access to your organization’s internal assets - and revoke that access directly from Oleria. When external permissions are left in place after a project ends, they become an unmonitored attack surface. The External Access page gives you the visibility and control to close those gaps.Documentation Index
Fetch the complete documentation index at: https://docs.oleria.com/llms.txt
Use this file to discover all available pages before exploring further.
Visibility
Oleria shows all external users and externally shared assets across all connected integrations. External users are users outside your connected instance who have access to your organization’s data in that specific instance - for example, an auditor with access to audit findings in Google Workspace.
Externally shared assets shows all assets (files, folders, repositories, Salesforce cases) in your connected instance that have been shared with at least one external user - for example, a Salesforce case shared with a third-party financial vendor.
Use the Sharing Method filter to group external access by category:
- Freemail - any publicly available freemail provider, for example Gmail.com.
- Third party vendor - any commercial email domain, for example vendor.com.
- Anonymous - publicly shared through an “Anyone with a link” mechanism.
Intelligence
Oleria surfaces not only direct external shares, but also inherited permissions from complex access chains. For each share, you can see exactly who shared the resource, how it is being shared, and where the permissions originate - giving you a complete picture of external access in your organization.
Oleria also populates access trails with usage analytics so you can see which external accesses are active, when they were last used, and which are dormant. Dormant external accesses are strong candidates for revocation to reduce over-provisioning and move toward least privilege.
Revoke external access
In addition to visibility and intelligence, you can initiate revocation directly from Oleria to your connected applications. Revoke external access by individual user, shared asset, or at the application level.
For step-by-step revocation instructions, see Revoke external users’ access permissions.