Access Graph components
Circular nodes. Each single circular node represents a single identity/resource instance, or a grouped identities/resource instances, with a number of nodes indicated below.
Icon examples
Name
Description
Single Identity
An entity that is used to identify and group people or machines.
Grouped Identities
Identities (Users, Roles and Groups) are grouped when there are 2 or more identities of the same type granting the same access to the same group of users.
This grouping only applies to the Resource Access Graph.
Single Resource instance
A specific instance of a Cloud service.
Grouped Resource instances
Resources are grouped when access is granted to 2 or more instances of the same Resource type.
Square nodes. Each single square node represents a single policy, or a grouped policies, with the number of policies indicated below.
Icon
Name
Description
Single policy
Sometimes referred to as Entitlements, these are entities that contain the permissions for what actions can be done on which resources/services and under what conditions.
Lines. Lines between the nodes represent the access granting path.
Vertical lanes. The nodes are grouped and organized into 4 lanes for ease of tracing and better readability.