Entitlement Graph

The Entitlement Graph shows the relationship between a user identity and the applications they have access to - which applications the identity can reach, how they got that access, and how frequently they use it. It fills a gap in the Access Graph, which maps access from application accounts to resource instances but does not show the identity-to-application layer.

The Entitlement Graph answers three questions:

• Which applications does a user identity have access to?
• How did they get that application access - directly, through a group, or through an IdP?
• How frequently do they access each application?

View the Entitlement Graph

1. Open Access Graph

   Navigate to Adaptive Security and select Access Graph.

2. Search for an identity

   Search for an identity account. The graph displays the identity nodes in the Access Graph framework.

3. Select an identity node

   Select an identity node to open its side panel.

4. Open the Entitlement Graph

   In the side panel, select an application account to load the Entitlement Graph for that identity. The graph shows all applications the identity has access to, with edges representing how that access was granted.

   

Switch between graph types

By default, both Access and Entitlement Graphs are enabled and displayed together. To focus on one graph type at a time, use the Graph Types panel.

View only the Entitlement Graph - select Entitlement from the Graph Types panel. The graph shows only the identity-to-application access layer.

View only the Access Graph - select Access from the Graph Types panel. The graph shows only the application account-to-resource layer.

Contact us

For questions, contact us at [e-mail].