If you've been a Secfix customer in early 2022 you might remember how tedious it was to scrap users with their roles, and security settings from the critical vendors and keep them up-to-date with our Google Sheet prototype. (See Screenshot 1). Sometimes one of the tools doesn't show relevant data in UI and you needed to dig deeper.
That's why we thought of Access Management features that include Access Page and Access Reviews feature.
The Access Page is where you will assign owners to all of your user accounts. The user account lists are pulled from the key services that you have integrated with Secfix on the
Connections Page
.
The users are broken out by each connection.: e.g. AWS, GCP, Azure, Google Workspaces, Office 365, etc.
The purpose of this page is to satisfy controls around access management which include 1 - you keep an eye on your accesses and 2 - documenting access reviews.
The goal is to quickly be able to map all accesses and identify shared accounts and accounts that don't have an owner. Otherwise, you will mark them as "not a person". You are not supposed to have accounts that are not linked to users.