Identity · Employees
Employees
Every person an agent can act as. Their IdP role is the ceiling on what any agent acting as them may do — so this is where you see who is delegating, what backs that delegation, and what it reaches today.
Delegating
2of 29
8 clients act as them
Connected accounts
2of 29
2 vendor credentials in the vault
Temporary grants
2
no expiry set
Needs attention
0
clients acting with nothing connected
Showing 29 of 29
Live — allowed by role and a connected account backs it·Grant — temporary, expires·Latent — allowed, but nothing connected, so it fails closed
Person
Role · IdP group
Acting as them
Connected accounts
Live reach
Last call
Not delegating · 27— nothing acts as them today, so there is nothing to watch
Acting as someone the directory doesn't know · 1
aud-probe1 client · aud-probe
These clients enrolled under an identifier no employee record carries, and an IdP re-sync does not rewrite it. dhvati will not guess which person they belong to — a near-match would merge two different humans — so they are listed here instead. Fix it at the source (the client's sign-in identity) and the row joins its person on the next call.
Sorted by what needs you first, then by live reach. People and roles are a read-only mirror of your identity provider — govern a role in Roles & Policies →