Overview
Vanta connects to PagerDuty via OAuth 2.0 and syncs user account data on a recurring schedule. That gives you continuous visibility into who has PagerDuty access, keeps that data current in Vanta's access review and compliance workflows, and (when enabled) lets you remove a user's PagerDuty account directly from Vanta during offboarding without any manual action in PagerDuty. This integration is most useful for:
Security and compliance teams that need to verify PagerDuty access is assigned to active employees and removed promptly when personnel leave.
IT and operations teams managing offboarding workflows who want to automate PagerDuty account removal directly from Vanta.
Compliance programs that require audit-ready evidence of access reviews and access lifecycle management for on-call tooling.
Estimated setup time: 5-10 minutes
Use cases and capabilities
This integration powers four workflows in Vanta:
Access reviews — We sync PagerDuty user accounts into Vanta so reviewers can confirm who has access, evaluate whether it's still appropriate, and produce audit-ready evidence without leaving Vanta.
Access requests — Synced PagerDuty users make PagerDuty available as a destination in Vanta's Access Requests workflow. Employees can request access and approvers can review requests with user context visible. Access request fulfillment is manual — we do not auto-provision new PagerDuty users when a request is approved.
Automated compliance tests — We bring in user account data to run two automated tests: one that verifies PagerDuty accounts are associated with users in Vanta, and one that confirms access is deprovisioned when personnel leave the organization.
Automated deprovisioning — When enabled, we can permanently remove a user's PagerDuty account directly from Vanta as part of an offboarding workflow with no manual action required in PagerDuty. This requires opting in during setup and authorizing write access. Accounts are deleted, not deactivated.
⚠️ Note: Automated deprovisioning is not enabled by default. This is an Access Management feature that may require an upgrade or add-on. Refer to Vanta Plans and Pricing for details. For a full walkthrough of the offboarding workflow, see Offboarding Personnel.
Capabilities summary
Resource / Capability | Supported | How it is used in Vanta |
Users | Yes | Access Reviews, Access Requests, Automated Tests |
User role | Partial | Basic role data appears on account records — role changes in PagerDuty are reflected on next sync |
Groups | No | Not currently synced by this integration |
Last login | No | Not currently synced by this integration |
MFA status | No | Not currently synced by this integration |
Deprovisioning | Yes | Automated user removal during offboarding — requires opt-in during setup; may require a plan upgrade |
Prerequisites
Confirm you have the following before setup:
A Vanta administrator account.
A PagerDuty account with Account Owner or Global Admin role..
ℹ️ Note: Users with lower permission levels (e.g., User, Limited User, Observer) will not be able to complete the OAuth authorization flow. See PagerDuty's user role documentation for details on role permissions.
Setup guide
Step 1: Connect in Vanta
In Vanta, go to the Integrations page, click Add integration.
Search for PagerDuty and click on the integration card.
Click Connect.
If you want automated deprovisioning, enable the deprovisioning option before continuing. Then click Connect PagerDuty. You will be redirected to the PagerDuty login page.
Step 2: Authorize in PagerDuty
Sign in to PagerDuty using an account with Account Owner or Global Admin permissions.
Review the permissions we are requesting and authorize access. If you enabled deprovisioning in Vanta before starting OAuth, the request will include write access needed to remove users during offboarding. Otherwise, the connection remains read-only.
PagerDuty redirects you back to Vanta automatically.
Step 3 (optional): Configure scope
Once redirected, you will see a confirmation that the connection was successful.
Use the Configure Scope option to exclude any user accounts that do not require monitoring in Vanta (e.g., service accounts or shared mailboxes).
Verification and validation
After setup, go to Integrations, search for PagerDuty, and verify the status shows Connected. To confirm the account data is syncing, go to Personnel > Access > select PagerDuty from the dropdown menu. Once the initial sync completes, active PagerDuty user accounts will populate on this page.
Disconnecting the integration
To disconnect PagerDuty from Vanta:
In Vanta, go to the Integrations page and select PagerDuty, or use the search bar to find it.
Click the three-dot menu next to the PagerDuty integration.
Select Delete from the dropdown and confirm.
Deleting the connection stops all user data syncing and disables automated deprovisioning. No further reads or writes occur after the connection is removed.
If you want to remove write access but keep the integration connected, reconnect the integration without enabling the deprovisioning option. This re-authorizes the connection with read-only scopes.
Permissions
What Vanta reads from PagerDuty
User accounts — We read user data including name, email, role, and profile URL. This confirms that only active employees retain system access and that terminated employees are deprovisioned promptly.
What Vanta writes to PagerDuty
We write only when automated deprovisioning is enabled, the connection was authorized with write-capable scopes, and an offboarding action is initiated in Vanta:
Removes users — We call PagerDuty's API to permanently delete the user from your PagerDuty account. No other user data is modified. Accounts are deleted, not deactivated.
We do not create users, modify user roles, or change any other account settings in PagerDuty.
Troubleshooting and FAQs
I can't authorize PagerDuty in the OAuth flow
Likely cause: Your PagerDuty account does not have sufficient permissions.
Fix: You must sign in with an account that has Account Owner or Global Admin role in PagerDuty. If you are unsure of your role, check your PagerDuty account settings or contact your PagerDuty administrator.
My users aren't appearing in Vanta after connecting
Likely cause: The initial sync has not yet completed, or the OAuth credentials are invalid.
Fix: Allow time for the initial sync to complete. If users still do not appear after an hour, verify that you authorized the connection with the correct PagerDuty account. You can reconnect the integration from the Integrations page in Vanta.
Deprovisioning is not available for PagerDuty
Likely cause: Your integration is connected with read-only permissions, deprovisioning was not selected during connection, or the deprovisioning feature is not included in your Vanta plan.
Fix: Reconnect the PagerDuty integration, enable the deprovisioning option during setup, and authorize write access. If you have already reconnected and deprovisioning is still unavailable, confirm that your Vanta plan includes Access Management features. Refer to Vanta Plans and Pricing for details.
Deprovisioning failed with Insufficient permissions
Likely cause: The OAuth token stored in Vanta was authorized by a PagerDuty user who no longer has Account Owner or Global Admin permissions, or the token's scopes do not include write access.
Fix: Reconnect the PagerDuty integration in Vanta using an account with Account Owner or Global Admin permissions, enable the deprovisioning option during setup, and authorize write access. This will generate a new OAuth token with the required scopes.
Deprovisioning failed with Reconnect the integration
Likely cause: The OAuth token has expired or been revoked. PagerDuty OAuth tokens expire after 30 days if they cannot be automatically refreshed. If this happens, reconnect the integration.
Fix: Go to the Integrations page in Vanta, find PagerDuty, and click Reconnect to re-authorize the connection.
Support
If you need help with this integration, contact Vanta's support team. In the Vanta app, click the ? icon in the top navigation and select Chat with us to connect with support, or select Help center to browse documentation. Vanta's support team handles all questions about this integration, including setup, syncing, and deprovisioning behavior.