Integrations, resources, roles

Overview

The Integrations screen in Entitle is a central hub for managing all applications and services connected to your Entitle tenant. It offers a clear overview of your linked integrations and allows you to perform various related actions.

The Integrations screen has several key functionalities:

This page provides you with step-by-step instructions on how to use the Integrations screen in Entitle.

The Integrations page

On the Integrations page, click the Add integration button in the top-right corner.
Provide the following information:
- Application: Select a supported application with which to create an integration. Once selected, a link to the integration's documentation appears to the right.
- Name: The integration's display name.
- Owner: Choose who should administer the integration and handle its approval workflows.
- Default approval workflow: The workflow automatically assigned to entitlements in this integration. You can overwrite it at the resource or role level.
- Checkboxes
  - Read-only: In read-only mode, user requests are not automatically granted. Instead, a ticket is opened for manual review and resolution.
  - Allow changing account permissions: When selected, Entitle can automatically grant or revoke permissions on this account. When deselected, Entitle can track but not modify permissions.
  - Allow creating accounts: When selected, a temporary account is created for each access request and is deleted once the request is revoked or times out.
    When deselected, the user must provide a permanent account for the request. Permissions are granted when the request is approved and removed when it is revoked or times out.
  - Allow users to edit accounts: When selected, users can edit their accounts for this integration. When deselected, their integration accounts are read-only.
    ℹ️
    - Account-mapping actions (such as mapping or removing an account from a user) may take up to 5 minutes to be reflected in the integration.
    - For more information, see Manage integration accounts.
  - Requestable: When selected, users can create entitlement requests for resources in this integration. When deselected, this integration is not available in the New request form.
  - Requestable by default: When selected, newly added resources in this integration are requestable by default. When deselected, new resources are not requestable by default.
    ℹ️
    Admins can override this setting for selected resources.
  - Auto-assign recommended resource owners: During a sync, Entitle can recommend who should own each resource. When selected, Entitle replaces existing resource owners with the recommended users. When deselected, current owners remain unchanged.
  - Auto-assign recommended resource maintainers: During a sync, Entitle can recommend who should maintain each resource. When selected, Entitle replaces existing maintainers with the recommended users. When deselected, current maintainers remain unchanged.
  - Notify about external permission changes: When selected, if an account in this integration is granted roles outside of Entitle's JIT access request flow or birthright policy (for example, by an admin manually granting permissions in the third-party integration or by an automated script), an audit log is created and streamed. A notification is then sent to Entitle administrators and the integration owner through instant messaging (Slack or Teams bots).
  - Override allowed durations: When selected, you can set custom duration options for this integration. When deselected, users creating requests see the duration options defined by the linked workflow. Bundles containing this integration are not affected.
- Save on: Choose whether you would like this integration to be saved on your own hosted agent or in Entitle’s cloud.
- Connection: View an example JSON configuration for the Application you selected above.
Once you have finished configuring the integration, click Save.