Access: Inventory, Comparison & Graph

This is the help text the console shows in the help panel on this page.

The Access page (sidebar: Access & Risk > Access) gives a granular view of every permission link in the organization. It has three tabs.

Access Inventory tab

The highest-risk live access relationships, ranked for remediation. Use the cards at the top to filter:

• All Access: everything.
• Dormant: access that has not been used or verified in 30 days.
• Stale Review: access that has not been re-certified in over 90 days.
• Needs Attention: access that needs a decision.

You can also filter by Asset Criticality and Role Level, and switch between All Entities, Humans and Service Accounts. The Freshness column shows Dormant, Review stale or Fresh.

Access Comparison tab

Compare access side by side for up to 5 items:

• By Employee: Compare several people to find outliers in their permissions.
• By Asset: Compare how different accounts are configured within a specific set of assets.

Access Graph tab

An interactive network of employees and assets, the fastest way to see the blast radius of one identity or asset. Filters, insights and the node drawer are described in Access Graph Map. The old /graph address opens this tab.

Common Use Cases

• Peer Comparison: Validate if two SREs have identical production access.
• Entitlement Drift: Identify users who have accumulated “extra” permissions over time that don’t match their current role.

Manual access records can carry an evidence file (PDF, image, CSV or XLSX, up to 10 MB) that anyone with access to the inventory can download with Download evidence.