> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Drata

AccessOwl integrates with Drata to assign and remove user roles in your Drata account.

## Capabilities

<CardGroup cols={2}>
  <Card title="Provisioning" icon="user-plus">
    AccessOwl assigns the requested role to existing Drata users during access requests.
  </Card>

  <Card title="Deprovisioning" icon="user-minus">
    AccessOwl removes users from their assigned role in Drata during access revocations.
  </Card>
</CardGroup>

<Note>
  Drata users are created through your connected identity provider, not by AccessOwl. AccessOwl manages the roles of users who already exist in Drata, and the user must be in Drata before a role can be assigned.
</Note>

## Prerequisites

* **Admin** access to your Drata account, so you can assign the integration account a role.

## Setup

<Steps>
  <Step title="Add Drata in AccessOwl">
    Either add a new application or open Applications and click the +-symbol, then continue.
  </Step>

  <Step title="Assign the integration account the Admin role">
    AccessOwl shows you the integration account's email address. The integration account must already exist in Drata through your identity provider. In Drata:

    * Open **Settings** and go to **Role Administration**.
    * Select **Admins**.
    * Search for the integration account by name and assign it the **Admin** role.

    <Note>
      The integration account needs the Admin role because only Admins can assign, change, and remove user roles in Drata.
    </Note>
  </Step>
</Steps>