Using Access Inventory - Oleria Identity Security

Access Inventory consolidates data from your connected platforms into a unified view. Use it to browse and filter identity accounts, application accounts, resource instances, and employees across all integrated systems. By default, the data displays in the Identity accounts view.

Selecting an account opens a full 360-degree overview of that identity.

Identity accounts

The Identity accounts view aggregates all identity accounts from your integrated applications into a consolidated view, streamlining access visibility across multiple identity platforms. Navigate to Posture → Access Inventory to view identity accounts.

Selecting an identity navigates to the 360 view showing assigned applications, method of assignment, related application accounts, assigned groups, and assigned roles - along with the corresponding metadata.

The following filters are available on the Identity accounts view:

Filter	Description
Account Email	The email address associated with the account.
Application	The specific application to which the account has access.
Application Instance	The instance of the application.
Assigned Application Count	Number of applications the identity account is a member of.
Assigned Groups Count	Number of groups the identity account is a member of.
Assigned Roles Count	Number of roles assigned to the identity account.
Authentication methods	How the identity account authenticates to an enterprise application or identity provider.
Created Date	The date the identity account was created.
Dormant Days	Number of days the application account has been inactive.
Identity Name	The name of the account holder.
Identity Type	Whether the account belongs to a human (User) or non-human (Machine) identity.
Is Admin	Whether the user account has administrator privileges.
Last Password changed	When the user password was last changed.
MFA Status	Whether multi-factor authentication (MFA) is enabled for the user.
SSO Enabled	SSO status of the application.
User Status	Whether the account is Enabled or Disabled in the application.

Common use cases

Find accounts assigned to more than n applications Apply the Assigned application count filter set to greater than n.

Find accounts using email as an authentication method Apply the Authentication methods filter set to includes Email.

Application accounts

The Application accounts view aggregates all application accounts from your integrated applications into a consolidated view. Navigate to Posture → Access Inventory → Application accounts.

Selecting an application account navigates to the 360 view of assigned groups, roles, and resource access - along with the corresponding metadata.

The following filters are available on the Application accounts view:

Filter	Description
Account Email	The email address associated with the account.
Account Name	The name of the account holder.
Account Type	Whether the account belongs to a human (User) or non-human (Machine) identity.
Application	The specific application to which the account has access.
Application Instance	The instance of the application.
Application Role	A role assigned within an application defining permissions in an RBAC system.
Assigned Groups Count	Number of groups the application account is a member of.
Assigned Roles Count	Number of roles assigned to the application account.
Authentication methods	How the application account authenticates to an enterprise application or identity provider.
Department Name	The department the account belongs to.
Dormant Days	Number of days the application account has been inactive.
Has API access	Whether the user account has API access.
Is Admin	Whether the user account has administrator privileges.
Last Password changed	When the user password was last changed.
License Level	The license assigned to the user.
MFA Status	Whether multi-factor authentication (MFA) is enabled for the user.
SSO Enabled	SSO status of the application.
User Status	Whether the account is Enabled or Disabled in the application.
User Type	Standard (internal), External (outside your organization with shared resource access), Anonymous (unauthenticated link-based access), or Unknown.

Common use cases

Find users who have not changed their password in the last 6 months Apply the Last Password changed filter set to before your target date.

Resource instances

The Resource instances view aggregates all resources from your integrated applications into a consolidated view. Navigate to Posture → Access Inventory → Resource Instances. Selecting a resource instance navigates to the 360 view of assigned groups, roles, and access to sub-resources - along with the corresponding metadata. The following filters are available on the Resource instances view:

Filter	Description
Application	The specific application to which the resource belongs.
Application Instance	The instance of the application.
Data Classification	The data classification label assigned to the resource.
Owner	The resource owner.
Owners count	Number of owners assigned to a resource.
Resource Instance Name	Name of the resource.
Resource type	The type of resource.
Sensitive Information Count	Number of files labelled with a data classification within a SharePoint site or folder.

Common use cases

Find all sensitive resources labelled Highly Confidential or Restricted Apply the Data Classification filter set to includes Confidential and Restricted.

Find all SharePoint site owners Apply the following filters:

Resource Type contains site
Data Classification includes Highly Confidential and restricted

Find SharePoint sites or folders with unlabelled sensitive files Apply the Sensitive Information Count filter set to greater than n.

Employees

The Employees view aggregates all employee records from your connected HR or identity applications. From HR applications: Employee information from connected HR applications such as Workday or SAP SuccessFactors is displayed automatically. Check Workspace → Integrations → Available for supported HR applications.

From identity applications: If your identity application is configured as the primary employee source in Access Review settings, employee information from that system is shown instead. Navigate to Governance → Access Reviews → Settings and select your identity application as the primary employee source. Navigate to Posture → Access Inventory → Employees to view employee data.

Selecting an employee navigates to the 360 view showing team information (if the employee is a manager) and identity application memberships, along with the corresponding metadata.

The following filters are available on the Employees view:

Filter	Description
Application Instance	The instance of the application.
Country Name	The employee’s country.
Department Name	The employee’s department.
Employee Name	The name of the employee.
Employee Number	The employee’s ID number.
Is Manager	Whether the employee manages other people.
Manager Name	Filters all direct reports for a given manager.
Start Date	The employee’s employment start date.
Title	The employee’s job title.

Common use cases

Find all team members reporting to a manager Apply the Manager Name filter set to includes the manager’s name.

Find all employees who are managers Apply the Is Manager filter set to True.

Contact us

For questions, contact us at support@oleria.com.

​Identity accounts

​Common use cases

​Application accounts

​Common use cases

​Resource instances

​Common use cases

​Employees

​Common use cases

​Contact us

Identity accounts

Common use cases

Application accounts

Common use cases

Resource instances

Common use cases

Employees

Common use cases

Contact us