App Status
- Assigned Apps
- Discovered Apps
- Ignored Apps
Officially managed by AccessOwl and visible in the app catalog for all employees. These apps include offboarding reminders and provisioning features.
Adding an Application
AccessOwl can detect apps you use via Google Workspace OAuth logs. If an app doesn’t show in the list of discovered applications:- Create a custom entry: Manually add it in AccessOwl.
- Use the built-in catalog: If the vendor exists in AccessOwl’s list, select it to speed things up.
You can still manage apps that don’t offer a direct integration. Instead of automatically provisioning user access it will notify the assigned application admins.
Integration Types
Integrated apps offer various functionalities like provisioning and user sync. If an app is already connected, hover over the “Connected” status icon to view the integration type, or check the app overview for full details on the integration’s capabilities.AccessOwl Integrations
Learn more about AccessOwl’s integrations.
Filtering by Integration
Your managed applications now include a filter for sync and provisioning integrations. Use this filter to narrow down your assigned apps by integration type, making it easier to see which of your managed apps are fully automated versus manually managed.Vendor Management
AccessOwl helps you manage vendor information by allowing you to record details like risk levels, renewal dates, and compliance notes. Use the Vendor Details section to add key information such as SOC 2 status, data location, or contract details. This keeps all vendor and application data centralized for easier renewal decisions and audits. To store additional information, such as user attributes, telephone numbers, or billing IDs, use the Markdown-enabled Notes field. You can also upload files like contracts or audit reports and bookmark important vendor URLs, ensuring all relevant details are easily accessible.FAQ
How often does AccessOwl sync with applications?
How often does AccessOwl sync with applications?
For integrations with user sync, AccessOwl updates user lists approximately every 3 hours.
I see a connection error or a “Partial” sync status on an app. Is something wrong?
I see a connection error or a “Partial” sync status on an app. Is something wrong?
In most cases, no. A Partial status simply means access sync is still working, but the most recent sync attempt did not fully complete. This can happen for a number of routine reasons, for example the application being briefly unavailable when AccessOwl tried to reach it.AccessOwl keeps retrying the connection automatically, so the status clears on its own once the next sync succeeds. There is nothing you need to do, and no need to reconnect the integration.
Why isn’t a specific application showing up in the list of discovered apps?
Why isn’t a specific application showing up in the list of discovered apps?
AccessOwl identifies apps through OAuth logs from Google or Microsoft. If an app doesn’t support these sign-in methods, it won’t appear in the discovered apps list. However, you can manually add it from the app templates or as a custom app.
How do I bulk revoke access to a specific app for multiple users?
How do I bulk revoke access to a specific app for multiple users?
If a team stops using an application and you want to remove access for several users at once:
- Open the application page in AccessOwl.
- Go to the Assigned Users tab.
- Select the users you want to remove.
- Click Revoke Access.
Can I move all Discovered users to Assigned at once?
Can I move all Discovered users to Assigned at once?
Yes. Open the application and go to the Discovered Users tab. Tick the checkbox in the table header to select every discovered user, or tick individual rows for a subset. Click Set Access and choose the access to assign. This promotes all selected users from Discovered to Assigned in one step.
How do I export a list of applications and who has access to them?
How do I export a list of applications and who has access to them?
You have two options depending on what you need:
- All applications in one file: On the Applications page, click Export in the top right. This gives you a single CSV covering every app, both managed and discovered.
- Discovered users on a specific app: For users detected through shadow IT (for example, a “Sign in with Google” login) who aren’t assigned yet, go to the Reports tab in the admin interface and export to CSV.
The access export from the Reports tab includes historical access states, so a department review can return rows for former users and access that has already ended. For a current-only list, filter out rows that have an end date populated (ended access), exclude Discovered apps, then filter by department. For programmatic exports, see the List access states API endpoint.