Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt

Use this file to discover all available pages before exploring further.

AccessOwl provides a 7-day free trial. Follow this guideline to get the most out of it. Expect to spend 15-30 minutes for the initial setup (steps 1 and 2).

​
Trial Guide

Start your 7-day Trial here!

We recommend to immediately schedule a Trial Review a week out.During the review you’ll be able to either receive an extension to your trial or define through the next steps to retain access to your AccessOwl account.
1

Google Workspace Integration & Initial Shadow IT Scan

  • Install Slack app
  • Integrate with Google Workspace
  • After initial Shadow IT scan, select 5-10 applications (you can always add more)
  • Optional: Add email discovery
Yes. We request the permissions to be able to create new Google Workspace accounts, update user roles (admins, group memberships), and read SSO logs. This level of access allows AccessOwl to automate provisioning and deprovisioning of users.
Google’s OAuth/SSO logs only uncover shadow IT if the user has used their Google account to login. Optionally AccessOwl can scan for invite emails in Gmail to discover additional shadow IT accounts.
2

Add Provisioning Integrations

  • Navigate to Applications
  • Click ’+‘-icon to add integration and follow setup instructions
    Integrations can have different capabilities such as provisioning, user sync, structure sync etc.
We require a dedicated service account for all integrations. For compliance reasons it’s important to have a clear traceability to understand whether the AccessOwl service account performed an action or a human being.
We set up an “integration account” in your organization. For each app (e.g., Slack, Notion, Figma), you give that integration account admin privileges. AccessOwl then uses either RPA (robotic process automation), screen scraping or private APIs to provision or deprovision people on your behalf.
Yes, it requires an inbox. Many apps (like Notion or Slack) send an invite or confirmation email. The integration account needs to receive and process that email to finish provisioning.
Yes. You create the AccessOwl integration account once in your Google Workspace, and then grant it admin privileges to any SaaS apps you want us to automate. AccessOwl will reuse that same email address to handle provisioning for each app.
3

Testing Specific Features

  • Navigate to Applications and select the Discovered tab
  • Approve apps which are officially used within your organization
  • Ignore apps that you don’t want to further track for the purpose of offboardings
Because employees have used “Sign in with Google” for those sites. AccessOwl has no way to know if it’s work‑related or personal. Anything irrelevant can be moved to “Ignore” to exclude it from offboarding reminders or future workflows.
Yes. AccessOwl will list every application where an employee used “Sign in with Google”. You might also find personal or test apps. You can choose to move those to the “Ignore” list if you don’t need to manage them.

​
Next Steps

Schedule a Trial Review to keep your AccessOwl access

Let us know if we can support you with a ROI calculation for your procurement process.

​
General FAQ

  1. Set up at least one or two key integrations (e.g., Slack, Notion, Zoom).
  2. Request Access to those apps via Slack so you can experience how approvals flow.
  3. Test an Onboarding by creating a new user (or using a mock user) and assigning them to some apps.
  4. Test an Offboarding by removing that mock user. If the app integrations were setup before, the user is deprovisioned automatically.
  5. Try an Access Review on the “Example Application”.
Yes, we have a dedicated Slack Connect channel or you can email our support. We generally respond quickly and can walk you through any configuration question during your trial.
We maintain SOC 2 Type 2 compliance, we provide our report and pen-test results upon request if you need them for vendor security reviews.
The number of billable users can be found under billing. We count all full members and multi-channel guests in Slack as billable users. It’s the closest approximation to real users, especially when compared to the total number of Google Workspace members which often include service accounts.
We can help estimate time saved on manual provisioning/deprovisioning and potential license cost savings by removing unused seats. We have frameworks and can share an ROI spreadsheet if you need a formal cost-benefit analysis for leadership.
If you decide to move forward, we schedule an onboarding call to cover best practices and finalize configurations. We can also provide any security documentation, NDAs, or DPAs as needed. Then you move into the paid plan and can roll it out fully.