Access Graph Map

This is the help text the console shows in the help panel on this page.

The Graph Map is the Graph tab of the Access page (sidebar: Access & Risk > Access, then Access Graph). It provides an interactive network visualization of the relationships between employees and assets across your entire environment. It is the fastest way to see the blast radius of a single identity or asset.

Reading the Graph

• Employee nodes are color-coded by status (active, onboarding or dormant, terminated or stale).
• Asset nodes are color-coded by criticality (critical, high-risk, normal).
• Edges represent access relationships and are colored by type (normal access, ownership, management) and risk level. Open Legend for the full key.

Filters

• Dormant: Show only inactive or unverified access links.
• Stale: Show access not re-certified in 90+ days.
• Elevated: Highlight privileged or admin-level connections.
• Terminated: Surface access still held by former employees.
• Critical Assets: Focus the graph on your most sensitive resources.
• Pick specific Employees, Department, Assets or Tags from the drop-downs; Clear resets them.

Insights

Click Insights to open Security Insights: Blast Radius (sole owners of critical or high assets), Privilege Paths, Dormant Risk Clusters, Over-privileged employees, Orphaned Assets and Lateral Movement Risk. Click a row to highlight the matching nodes on the graph.

Layout Options

• Concentric: Groups nodes by type, useful for a clean overview.
• Hierarchical: Shows a top-down access tree from assets to users.
• Force: Physics-based layout that naturally clusters heavily connected nodes.

Use Fit to screen to reset the zoom and Re-run layout to rearrange the nodes.

Sidebar

Click any node to see its full profile. For an employee: email, department, job title, identity type and the assets they can access with role and last-seen date. For an asset: type, tags, owner and the identities that have access, with risk score.