Capabilities
Provisioning
AccessOwl creates user accounts with the specified roles/permissions during access requests.
Deprovisioning
AccessOwl deletes members from the Harmony SASE team during access revocations.
Prerequisites
- Admin access to your Harmony SASE team, so you can invite the integration account.
Setup
Add Harmony SASE in AccessOwl
Either add a new application or open Applications and click the +-symbol, then continue.
Invite the integration account as Admin
AccessOwl shows you the integration account’s email address. In Harmony SASE:
- Open the Team section in the left sidebar.
- Click Members.
- Click Invite Members in the top right corner.
- Enter the integration account’s email address.
- Send the invite.
- In Team > Members, click the integration account’s row.
- In the Actions section, click Change role.
- Set the role to Admin.
The Admin role is required because it has full control over user roles and permissions, including the ability to invite members, assign any role, and delete members. The User Manager role can also invite and delete members but cannot assign or modify Admin-level roles.

