List account access records for an audit

Retrieves account access population data for an audit.

This endpoint provides access to account access records visible to auditors during an audit engagement. Account access data comes from various sources:

• IDP Services (Identity Providers): Okta, Azure AD, Google Workspace, OneLogin, PingOne

  • Returns user accounts from identity providers
  • Supports filtering by search and status

• Role Grants Services: GCP, Azure (when role grants are enabled)

  • Returns accounts with role-based access grants
  • Supports filtering by search and status

• First-Party Account Services: AWS, Oracle Cloud, Azure (when not using role grants), etc.

  • Returns cloud provider account access records
  • Supports filtering by search and status

• Received Account Services: External applications (Jira, GitHub, Slack, etc.)

  • Returns user accounts from third-party integrations
  • Supports filtering by search and status

Supports filtering by:

• search: Searches account names/emails (case-insensitive)
• status: Filters by account status

Uses cursor-based pagination. To paginate:

1. Make initial request with desired pageSize
2. Check results.pageInfo.hasNextPage
3. Use results.pageInfo.endCursor as pageCursor for next request

The default sort order depends on the service type:

• Identity provider services (e.g. Okta, Azure AD): sorted by email, ascending
• Cloud provider services (e.g. AWS, GCP): sorted by account name, ascending
• Role grant services: sorted by account name, ascending
• Third-party application services (e.g. GitHub, Jira): sorted by account name, ascending

Sort order cannot be customized via query parameters.

Rate limit: 10 requests / minute.

{
  "results": {
    "data": [
      {
        "id": "5f2c939a52855e725c8d5824",
        "accountName": "john.doe@example.com",
        "owner": "John Doe",
        "role": [
          "Admin"
        ],
        "mfa": true,
        "createdDate": "2024-01-15T10:30:00.000Z",
        "deactivatedDate": "2024-06-20T08:00:00.000Z"
      }
    ]
  }
}