WorkOS access hygiene digest
Scheduled read-only digest for WorkOS access governance. It reads one page each of organizations, users, organization memberships, invitations, directories, SSO connections, roles, and permissions through recued-core.workos, renders compact tables, and can send an in-app nudge when access records are visible. It never creates, updates, deactivates, revokes, deletes, authenticates users, exchanges tokens, exports audit logs, or calls arbitrary WorkOS APIs.
How it works
Inspect the data fetches, transforms, gates, and output this recipe runs.
Process (33 steps)
organizations_raw
?
users_raw
?
memberships_raw
?
invitations_raw
?
directories_raw
?
connections_raw
?
roles_raw
?
permissions_raw
?
organizations
default
Apply default
users
default
Apply default
memberships
default
Apply default
invitations
default
Apply default
directories
default
Apply default
connections
default
Apply default
roles
default
Apply default
permissions
default
Apply default
organization_count
count
Count items in organizations
user_count
count
Count items in users
membership_count
count
Count items in memberships
invitation_count
count
Count items in invitations
directory_count
count
Count items in directories
connection_count
count
Count items in connections
role_count
count
Count items in roles
permission_count
count
Count items in permissions
visible_count
sum
Sum values in
has_records
compare
Check if visible count is greater than 0
notify_enabled
compare
Check if setting notify when records equals true
should_notify
all
Check if all conditions are true
notify
?
skip: step.should_notify not_equal true
organization_table
to_table
Format results as a data table
user_table
to_table
Format results as a data table
membership_table
to_table
Format results as a data table
card
to_summary
Format results as a summary card
Settings
Configurable at install. Defaults shown — change them anytime in Recued.
workos
setting
=
channels
setting
=
in_app
end hour
setting
=
10
weekdays
setting
=
1,2,3,4,5
row limit
setting
=
25
start hour
setting
=
8
notify when records
setting
=
true
Trust & control
What installing this recipe would let it do. Recued grants these permissions at install — review them there before approving.