> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oleria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using Access Inventory

Access Inventory consolidates data from your connected platforms into a unified view. Use it to browse and filter identity accounts, application accounts, resource instances, and employees across all integrated systems. By default, the data displays in the Identity accounts view.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef14bb6426849e21748d4_AD_4nXfrRCYJ8_vFAaN9WgaeNB2FQjBeTc07oGM68zbAHmiWb-NBYS1SjyW3MoBVV49HlETraozf7pcP6mwdN_sqZO43Q9rcsm3G2vIUYmpjPsQIJIrYBUPo9i5VtYXCYGFMejj_gul31g%3Ds800.png)

Selecting an account opens a full 360-degree overview of that identity.

## Identity accounts

The Identity accounts view aggregates all identity accounts from your integrated applications into a consolidated view, streamlining access visibility across multiple identity platforms.

Navigate to **Posture** → **Access Inventory** to view identity accounts.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef14bb6426849e21748d4_AD_4nXfrRCYJ8_vFAaN9WgaeNB2FQjBeTc07oGM68zbAHmiWb-NBYS1SjyW3MoBVV49HlETraozf7pcP6mwdN_sqZO43Q9rcsm3G2vIUYmpjPsQIJIrYBUPo9i5VtYXCYGFMejj_gul31g%3Ds800.png)

Selecting an identity navigates to the 360 view showing assigned applications, method of assignment, related application accounts, assigned groups, and assigned roles - along with the corresponding metadata.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b387816974a_AD_4nXdMYWSGnsIk0GeW1rvBKALyVJjjAkLVyNAlaFl4KNabiQo5kVh0R3QUw3TtuC7bpEKeCaS_xtsLOs1rxddnlrwAD4YMTmTcUSDhuASkwoAxH0AbHBrXix9NdcMTFncXl4deh2h0Qw%3Ds800.png)

The following filters are available on the Identity accounts view:

| Filter                     | Description                                                                               |
| :------------------------- | :---------------------------------------------------------------------------------------- |
| Account Email              | The email address associated with the account.                                            |
| Application                | The specific application to which the account has access.                                 |
| Application Instance       | The instance of the application.                                                          |
| Assigned Application Count | Number of applications the identity account is a member of.                               |
| Assigned Groups Count      | Number of groups the identity account is a member of.                                     |
| Assigned Roles Count       | Number of roles assigned to the identity account.                                         |
| Authentication methods     | How the identity account authenticates to an enterprise application or identity provider. |
| Created Date               | The date the identity account was created.                                                |
| Dormant Days               | Number of days the application account has been inactive.                                 |
| Identity Name              | The name of the account holder.                                                           |
| Identity Type              | Whether the account belongs to a human (User) or non-human (Machine) identity.            |
| Is Admin                   | Whether the user account has administrator privileges.                                    |
| Last Password changed      | When the user password was last changed.                                                  |
| MFA Status                 | Whether multi-factor authentication (MFA) is enabled for the user.                        |
| SSO Enabled                | SSO status of the application.                                                            |
| User Status                | Whether the account is Enabled or Disabled in the application.                            |

### Common use cases

**Find accounts assigned to more than n applications**

Apply the **Assigned application count** filter set to greater than `n`.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b3878169780_AD_4nXcc7ps9QKwVKF7tt0b3RgzWPSFIWV9Hqur0aSaUKcokOmou6vvNHC-yyH1TmAFx4jPgsGVGZzEeg4HXbqzg2KqPX7DobmuHtZRE-CRYhNLHrblaEBO18uY1nfhJagtI2WdBMV56pA%3Ds800.png)

**Find accounts using email as an authentication method**

Apply the **Authentication methods** filter set to includes `Email`.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b3878169744_AD_4nXdYFCHrlWmrrIjeVQp0vqb3Xmvg1UbnUoUHL_qcR8JlCnwsnVv0gMXOQZqjXyN5GEUo8ULAnJTMB7RXlfMioIayIJtUc6FiamRMKBcf5VyiWKDVgduZjfbbmG6CbwrtGybn5C9idQ%3Ds800.png)

## Application accounts

The Application accounts view aggregates all application accounts from your integrated applications into a consolidated view.

Navigate to **Posture** → **Access Inventory** → **Application accounts**.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b3878169733_AD_4nXceAIjFWN7xFn5l1-m-enz5WM82946BGHL2YI0Nh_lUqnq3A62-Oq3OXwIOwqo-5RKKj1qKL1Up5nKb8se7unHX4nnbxUQWHIkL_5nGZUWgGpyFMZlj0Bk_jXRu5f5bhoP799k9qQ%3Ds800.png)

Selecting an application account navigates to the 360 view of assigned groups, roles, and resource access - along with the corresponding metadata.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b3878169730_AD_4nXfrUiS0YYxq5fvWdCt4sAx7c1tnPQD5UrMxHH0pMCSWypHJt-0ztM8T84YVHF88i2bkvfWZeLemi_YlKmx-O2_MOPJy07eu1hFf8uT602vyA7x9ej5FRebj7wLxG0xvkjlOfq8tzg%3Ds800.png)

The following filters are available on the Application accounts view:

| Filter                 | Description                                                                                                                                       |
| :--------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------ |
| Account Email          | The email address associated with the account.                                                                                                    |
| Account Name           | The name of the account holder.                                                                                                                   |
| Account Type           | Whether the account belongs to a human (User) or non-human (Machine) identity.                                                                    |
| Application            | The specific application to which the account has access.                                                                                         |
| Application Instance   | The instance of the application.                                                                                                                  |
| Application Role       | A role assigned within an application defining permissions in an RBAC system.                                                                     |
| Assigned Groups Count  | Number of groups the application account is a member of.                                                                                          |
| Assigned Roles Count   | Number of roles assigned to the application account.                                                                                              |
| Authentication methods | How the application account authenticates to an enterprise application or identity provider.                                                      |
| Department Name        | The department the account belongs to.                                                                                                            |
| Dormant Days           | Number of days the application account has been inactive.                                                                                         |
| Has API access         | Whether the user account has API access.                                                                                                          |
| Is Admin               | Whether the user account has administrator privileges.                                                                                            |
| Last Password changed  | When the user password was last changed.                                                                                                          |
| License Level          | The license assigned to the user.                                                                                                                 |
| MFA Status             | Whether multi-factor authentication (MFA) is enabled for the user.                                                                                |
| SSO Enabled            | SSO status of the application.                                                                                                                    |
| User Status            | Whether the account is Enabled or Disabled in the application.                                                                                    |
| User Type              | Standard (internal), External (outside your organization with shared resource access), Anonymous (unauthenticated link-based access), or Unknown. |

### Common use cases

**Find users who have not changed their password in the last 6 months**

Apply the **Last Password changed** filter set to before your target date.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b387816973d_AD_4nXesCOv2erHJq3agPU7TOcCIXBeAlkGH61nCLAhkXzw8i7aEfYdWQPIZV0p2NRj1NAru438Y-Cvud0cMdlGyfU98zH9B69ZLuorxG5M78DV-qy05xHKIpS361SGgkboVXrgJ8LNsAw%3Ds800.png)

## Resource instances

The Resource instances view aggregates all resources from your integrated applications into a consolidated view.

Navigate to **Posture** → **Access Inventory** → **Resource Instances**.

Selecting a resource instance navigates to the 360 view of assigned groups, roles, and access to sub-resources - along with the corresponding metadata.

The following filters are available on the Resource instances view:

| Filter                      | Description                                                                             |
| :-------------------------- | :-------------------------------------------------------------------------------------- |
| Application                 | The specific application to which the resource belongs.                                 |
| Application Instance        | The instance of the application.                                                        |
| Data Classification         | The data classification label assigned to the resource.                                 |
| Owner                       | The resource owner.                                                                     |
| Owners count                | Number of owners assigned to a resource.                                                |
| Resource Instance Name      | Name of the resource.                                                                   |
| Resource type               | The type of resource.                                                                   |
| Sensitive Information Count | Number of files labelled with a data classification within a SharePoint site or folder. |

### Common use cases

**Find all sensitive resources labelled Highly Confidential or Restricted**

Apply the **Data Classification** filter set to includes `Confidential and Restricted`.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b387816975f_AD_4nXeTxf6ls6tbFiBdC_bgNKj06E7vG5d4Wbiq5S6plScjnerdBwEGRm_QUvoxEo1fZbAjb5Mvs2MDBeSbtXLctLIQ3jwe12CxbdddQNvJWKLy9tgLCAnMOY-n2dacAtbgulxLeG4Xpw%3Ds800.png)

**Find all SharePoint site owners**

Apply the following filters:

* **Resource Type** contains `site`
* **Data Classification** includes `Highly Confidential and restricted`

**Find SharePoint sites or folders with unlabelled sensitive files**

Apply the **Sensitive Information Count** filter set to greater than `n`.

## Employees

The Employees view aggregates all employee records from your connected HR or identity applications.

**From HR applications:** Employee information from connected HR applications such as Workday or SAP SuccessFactors is displayed automatically. Check **Workspace** → **Integrations** → **Available** for supported HR applications.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b387816975c_AD_4nXfYInhDkuZjDvhPB5OOmVyI6I6zlCnzWu2jsOvJtEi6rnJK7kgHj_KthZXN43OhP8nNJeW2MOZivZpZg3xbI866URKvUMSAmU-6g3UOXrKvtx6gAM3XdM-FYrbz_mPNKx28REnieg%3Ds800.png)

**From identity applications:** If your identity application is configured as the primary employee source in Access Review settings, employee information from that system is shown instead. Navigate to **Governance** → **Access Reviews** → **Settings** and select your identity application as the primary employee source.

Navigate to **Posture** → **Access Inventory** → **Employees** to view employee data.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b3878169778_AD_4nXfEGcEmMu2WhiTuP1u7yKsUEbzws-9vvRQSfuD3MOBHT83SBXqyl_AiZ93hWt58NsFazEvqMcVjrhmPuR0Lo-Nvt6Q24pNFQKMWMicN3WD8hTVVzOA0sJMEs5eL0iVoLbtr518e%3Ds800.png)

Selecting an employee navigates to the 360 view showing team information (if the employee is a manager) and identity application memberships, along with the corresponding metadata.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b387816977b_AD_4nXfv4KKwulPm6XXe1Skv8URSFsC9SU0hBJvJizqMw5_GiXk3B2AbY4Wg1Rcq_pNknu1CMIi2oILBuzX8a3Xs_cGTkDvoErIWDpguMZhVpkNqPh16HwtWvlWUDSFnCWbnnNTwH2LQ%3Ds800.png)

The following filters are available on the Employees view:

| Filter               | Description                                     |
| :------------------- | :---------------------------------------------- |
| Application Instance | The instance of the application.                |
| Country Name         | The employee's country.                         |
| Department Name      | The employee's department.                      |
| Employee Name        | The name of the employee.                       |
| Employee Number      | The employee's ID number.                       |
| Is Manager           | Whether the employee manages other people.      |
| Manager Name         | Filters all direct reports for a given manager. |
| Start Date           | The employee's employment start date.           |
| Title                | The employee's job title.                       |

### Common use cases

**Find all team members reporting to a manager**

Apply the **Manager Name** filter set to includes the manager's name.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b3878169762_AD_4nXcMJ027l-nX3QTuHvNukad4L8ZljJH_TjTtDqwFDh8w6ZKMfrMExvCIpMEqDt6L42AX5fImxuKn426T0AHRmzcS7VdR-g-5_T12lmjqO6__p70n2i7MDNRq6rWKM5qSLe1naZn4Qg%3Ds800.png)

**Find all employees who are managers**

Apply the **Is Manager** filter set to `True`.

![](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/68bef31143f43b3878169770_AD_4nXcT7pCoOOkfdKl21waYgtdxMsIM5G9taCCZ97wxtg0iqvSnbk344CTcbkbV46-J6Q7iYydFqtLBpa2vKEJtcNOCGuT9AjsCnZLVwu6i870VV9lYpLjRUOGOYyXX8pQ7Qo4K159D%3Ds800.png)

## Contact us

For questions, contact us at [support@oleria.com](mailto:support@oleria.com).