> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Orca Security

AccessOwl integrates with Orca Security to provision and deprovision user access in your Orca Security organization.

## Capabilities

<CardGroup cols={2}>
  <Card title="Provisioning" icon="user-plus">
    AccessOwl invites users with the specified roles during access requests.
  </Card>

  <Card title="Deprovisioning" icon="user-minus">
    AccessOwl removes users from your Orca Security organization during access revocations.
  </Card>
</CardGroup>

## Prerequisites

* **Administrator** access to your Orca Security organization, so you can invite the integration account.

## Setup

<Steps>
  <Step title="Add Orca Security in AccessOwl">
    Either add a new application or open Applications and click the +-symbol, then continue.
  </Step>

  <Step title="Invite the integration account as Administrator">
    AccessOwl shows you the integration account's email address. In Orca Security:

    * Open **Settings** and go to **User Management**.
    * Click **Invite User**.
    * Enter the integration account's email address.
    * Set the role to **Administrator**.
    * Send the invitation.

    <Note>
      The integration account needs the Administrator role because only Administrators can create, update, and delete users in Orca Security.
    </Note>
  </Step>
</Steps>

## FAQ

<AccordionGroup>
  <Accordion title="Can AccessOwl restrict a user to specific accounts or business units?">
    Orca Security lets you limit an invited user's scope to specific cloud accounts, business units, or AppSec projects. AccessOwl assigns the role only. If you need a scoped user, adjust the scope in Orca Security after the access request has been fulfilled.
  </Accordion>
</AccordionGroup>