Access Page

The access page allows you to add and manage your users within Vanta. From here, you can view who is using the platform, what Access they have, and any groups they are a part of, giving you a quick and insightful overview.


The Access Page

The purpose of this page is to satisfy controls around access management. You should avoid having shared accounts or accounts that do not have an owner. If you have any service accounts, it is recommended to mark them as Not a Person.

  • From the left-hand navigation panel, select Access
  • Each line item gives you information about the Owner of each account, which groups they belong to, and the status of the user


Assigning & Reassigning an Account

  • To reassign a user to an account, select Reassign on the account that needs to be changed.
  • From here, you can
    • Add a User: Add a new user to Vanta by entering their first name, last name, group association, and start date. This will create a new employee on the People Page and was likely not included in your Identity Provider 


    • Assign an External User: Mark this user as a user outside of your organization. These users have access to the system but are not included in the Identity Provider and have limited access to your system (ie. external slack connections).
    • Mark as Not a Person: Recognize this user as a Bot or system that should be selected for service accounts
    • Assign to User: Filter for an existing user and assign




Filter by Platform

  • To filter by a specific platform, select the dropdown in the top right-hand corner, and click the platform you want to view


Filter by Status

  • To filter by status, select the dropdown in the top right-hand corner and click the status you would like to sort by

Export Access Data

  • Exporting Access Data will download the information from the Access page to an excel file.
  • Information will be sorted into separate excel sheets based on platforms, i.e AWS, Slack, etc.


Auditor Access to Completed Access Reviews 

  • To provide clear information to your auditors regarding access reviews, download your completed access review, and upload it to the "Proof of Access Review" document