Capabilities
Provisioning
AccessOwl creates user accounts with the specified roles/permissions during access requests.
Deprovisioning
AccessOwl removes members from the Anthropic Console organization during access revocations.
User Sync
AccessOwl periodically syncs a list of users along with their assigned roles/permissions through an Anthropic Admin API key.
Prerequisites
- Admin access to your Anthropic Console organization, so you can invite the integration account and create an Admin API key.
Setup
1
Add Anthropic Console in AccessOwl
Either add a new application or open Applications and click the +-symbol, then continue.
2
Invite the integration account as Admin
AccessOwl shows you the integration account’s email address. In the Anthropic Console:
- Open Settings and go to Members.
- Click + Invite in the upper-right corner.
- Enter the integration account’s email address.
- Set the role to Admin.
- Send the invite.
The integration account needs the Admin role because only organization Admins can manage Console members and invitations. Invitations expire after three weeks if not accepted.
User Sync setup
The User Sync reads your Console members and their roles through Anthropic’s Admin API and needs an Admin API key. Provisioning and deprovisioning run through the integration account, so keep it in your organization.1
Create an Admin API key in the Anthropic Console
Sign in as a member with the Admin role, then open Settings > Admin keys. Click Create key, give it a name and choose an expiration.Copy the key right away. It starts with
sk-ant-admin01- and is shown only once.2
Add the key in AccessOwl
Add the Anthropic Console User Sync in AccessOwl and paste the Admin API key into the form.
The sync stops when the key expires. Choose the expiration with that in mind and create a new key before the old one runs out.