Okta access hygiene digest
Use “Okta access hygiene digest” in Recued. It provides a scheduled, read-only Okta access governance digest.
How it works
Inspect the data fetches, transforms, gates, and output this recipe runs.
Process (22 steps)
users_raw
recued-core.okta.user.search
Search user on okta
groups_raw
recued-core.okta.group.search
Search group on okta
apps_raw
recued-core.okta.app.search
Search app on okta
logs_raw
recued-core.okta.log.search
Search log on okta
defaults
defaults
Apply defaults
user_count
count
Count items in users
group_count
count
Count items in groups
app_count
count
Count items in apps
event_count
count
Count items in events
has_events
compare
Check if event count is greater than 0
notify_enabled
compare
Check if setting notify when events equals true
should_notify
all
Check if all conditions are true
notify
core.notification.send
Send notification
skip: step.should_notify not_equal true
user_rows
slice
Take a subset of
group_rows
slice
Take a subset of
app_rows
slice
Take a subset of
event_rows
slice
Take a subset of
user_table
to_table
Format results as a data table
group_table
to_table
Format results as a data table
app_table
to_table
Format results as a data table
event_table
to_table
Format results as a data table
card
to_summary
Format results as a summary card
▼
Output
summary
card
table
event_table
table
user_table
table
group_table
table
app_table
Settings
Configurable at install. Defaults shown — change them anytime in Recued.
since
setting
=
until
setting
=
channels
setting
=
[object Object]
end hour
setting
=
10
weekdays
setting
=
1,2,3,4,5
row limit
setting
=
20
app filter
setting
=
status eq "ACTIVE"
log filter
setting
=
eventType sw "user.lifecycle"
start hour
setting
=
8
user filter
setting
=
status eq "ACTIVE"
group search
setting
=
notify when events
setting
=
true
Uses (6 operations)
Triggers
Time watch
core.watch.time
Pack operation
Search user on okta
recued-core.okta.user.search
Pack operation
Search group on okta
recued-core.okta.group.search
Pack operation
Search app on okta
recued-core.okta.app.search
Pack operation
Search log on okta
recued-core.okta.log.search
Notifications
Send notification
core.notification.send
Trust & control
What installing this recipe would let it do. Recued grants these permissions at install — review them there before approving.
Permissions it requires
Declared by the recipe — Recued grants these at install, where you review them before approving.What it's allowed to do
Read
Triggers
core.watch.time
read-only
Read
Notifications
core.notification.send
external change
4 more aren't listed here. You'll see them at install.