Access Scopes
Create and view access scopes
Last updated
Was this helpful?
Create and view access scopes
Last updated
Was this helpful?
Access Scopes extend the value of the Inventory page by allowing you to save and use your queries as dynamic, reusable groups of resources:
Perform future resource analysis
Build access flows with access scopes
These scopes automatically update as new resources matching the criteria are discovered across your integrations. Apono syncs integrations every hour.
For example, you can create an access scope such as Production Read Access to identify all resources with read permissions in production. Then, you can build an access flow with the Production Read Access scope. As new resources are added through your Apono integrations, they automatically become part of the saved scope, ensuring that future access requests include all applicable resources.
Follow these steps to create an access scope:
Click Save Access Scope. The Save Access Scope popup window appears.
Enter an Access Scope Name.
Click Save Access Scope. The access scope is saved and appears as the selected access scope.
You can now use the access scope to build an access flow or periodically view the list of resources that meet the access scope's criteria.
Ensure that the access scope criteria are narrowly defined. Access scopes automatically adjust as new resources matching your criteria are identified across integrations. Broad or overly permissive criteria may inadvertently grant unauthorized user access.
After creating an access scope, you can use the access scope in an access flow.
Use in a new access flow
Follow these steps to apply the access scope to a new access flow:
Click Use in access flow. A popup window appears.
Click Use in New Access Flow.
Use in an existing access flow
Follow these steps to apply the access scope to an existing access flow:
Click Use in access flow. A popup window appears.
Beside an existing access flow, click Use. The access scope is added as a set of resources within the access flow.
Follow these steps to select an access scope:
On the Inventory page, click the Saved Access Scope dropdown menu.
(Optional) Enter the name of the access scope in the search field.
Select the access scope. The list of resources will be filtered by the criteria of the access scope.
Follow these steps to delete an access scope:
On the Inventory page, click the Saved Access Scope dropdown menu.
An access scope can only be deleted if it is not associated with an access flow. If an access scope is linked to one or more access flows, a popup window will appear with links to the relevant access flows:
Click each link to open the associated access flow.
Remove the access scope from the access flow.
After you have removed the access scope from all access flows, return to the Inventory page to delete the access scope.
Click Yes.
Create an .
Click (trash icon) next to the access scope to delete. A confirmation window appears.