> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Harmony SASE

AccessOwl integrates with Harmony SASE to provision and deprovision user access in your Harmony SASE team.

## Capabilities

<CardGroup cols={2}>
  <Card title="Provisioning" icon="user-plus">
    AccessOwl creates user accounts with the specified roles/permissions during access requests.
  </Card>

  <Card title="Deprovisioning" icon="user-minus">
    AccessOwl deletes members from the Harmony SASE team during access revocations.
  </Card>
</CardGroup>

## Prerequisites

* **Admin** access to your Harmony SASE team, so you can invite the integration account.

## Setup

<Steps>
  <Step title="Add Harmony SASE in AccessOwl">
    Either add a new application or open Applications and click the +-symbol, then continue.
  </Step>

  <Step title="Invite the integration account as Admin">
    AccessOwl shows you the integration account's email address. In Harmony SASE:

    * Open the **Team** section in the left sidebar.
    * Click **Members**.
    * Click **Invite Members** in the top right corner.
    * Enter the integration account's email address.
    * Send the invite.

    Once the integration account accepts the invitation, change its role to **Admin**.

    * In **Team > Members**, click the integration account's row.
    * In the **Actions** section, click **Change role**.
    * Set the role to **Admin**.

    <Note>
      The Admin role is required because it has full control over user roles and permissions, including the ability to invite members, assign any role, and delete members. The User Manager role can also invite and delete members but cannot assign or modify Admin-level roles.
    </Note>
  </Step>
</Steps>