Debug access

Oblique provides several ways to help you understand and debug access:

• Object details pages for users, groups, and resources show you the access a user, group, or resource has.
• Audit logs show you the history of access changes for a user, group, or resource.
• The access graph shows you the relationships between users, groups, and resources.

When debugging why a user does or doesn’t have access, consider these common questions:

• Who has access to this resource?
• How does this user have access to this resource?
• How has access changed for this user or this resource over time?

See what access a user or group has

To see what access a user or group has, navigate to the user’s or group’s detail page.

Under Access, you can see the resources the user or group has access to. Under How, you can see whether that access comes directly or indirectly. Indirect access is when a user has access to a resource through a group they belong to.

You can search this table for resources which the user or group has access to.

See who can access a resource and how

To see who can access a resource, navigate to the resource’s detail page.

Under Access, you can see the users and groups that have access to the resource. This includes the number of users and groups that have direct access and the total number of users having access to this resource.

You can search this table for users and groups that have access to the resource.

See how a user has access to a resource

To see how a user has access to a resource, navigate to the user’s detail page, and then next to Access, select View graph. This will show the access graph for the user, which shows the relationships between the user and the resources they have access to.

You can also open this view from the Access table on a resource’s detail page for a user. Identify the desired user in the table and then select More and then View graph.

See how access to a resource is obtained

To understand how access to a resource is obtained, navigate to the resource’s detail page. Next to Access, select View graph. This shows the access graph for the resource, which displays the relationships between the resource and the users and groups that have access to it.

You can also open this view from the Access table on a user’s or group’s detail page. Identify the desired resource in the table and then select More and then View graph.

See how access has changed for a user or a group

Audit logs show you the history of actions taken in Oblique for a particular object.

To see audit logs affecting a user or group, navigate to the Logs page, and then search or filter for the user or group.

You can also navigate to a filtered view of audit logs for a user or group from the user’s or group’s detail page. In the header menu, next to Grant access, select More and then View history.

Caution

Audit log filters only show direct actions. If a user’s access changes due to a change in a group they belong to, this change does not appear in audit logs filtered for that user.

Caution

Audit logs only show actions taken in Oblique. The system does not show automated actions, such as membership changes to attribute-based groups or expiration of an entitlement.

See how access to a resource has changed

To see audit logs affecting a resource, navigate to the Logs page, and then search or filter for the resource.

You can also navigate to a filtered view of audit logs for a resource from the resource’s detail page. In the header menu, next to Open in Okta…, select More and then View history.