Review the service accounts and keys inventory

Review the service accounts and keys inventory to assess the security posture of user-created or system-created identities in your org.

About this task

The Inventory displays summaries and details of your service accounts and keys.

Procedure

  1. In the Identity Security Posture Management console, go to Inventory > Non-human identities > Service accounts & keys.
  2. Review the summaries at the top of the page.
    • Identities: The total count of service accounts, keys, and tokens
    • Identities by source: A summary of service accounts and keys by identity provider
    • Identities and credentials: A summary of service accounts and keys grouped by their authentication method
    • Last rotation: A summary of the key and token's last rotation
  3. Review the service accounts and keys table.
    • Account: The name of the service account, with an icon indicating its source
    • Credentials: All authentication methods that are configured for the account, such as client secrets and certificates
    • Privileges: The service account's admin permission level
    • Identity types: The type of identity (service, keys, or tokens)
    • Last activity: The most recent activity that's logged by the account (usually a login)
    • Last key rotation: The oldest credential rotation date across all methods for the account
    • Last password change: The date of the account's last password change
    • Issues: Rotation and usage of service accounts, keys, and tokens
    • Date created: The date the service account was created
  4. Review an account's details in the side pane.
    • Overview: A single page summary of the account's details, issues, sign-in and MFA analysis, and activity
    • MFA: The MFA requirements for the account and resulting status
    • Groups & Roles: The groups and roles that are assigned to the service account
    • Login Methods: The methods configured for the org