Audit and Access Tickets

Executive Summary

To meet organizations in their processes today, Opal has multiple integrations with ticketing providers. The first integration, Audit Tickets, enables Opal to create and update tickets, enabling the ticketing provider to be the central source of truth for reporting. The second integration, Access Tickets, automatically revokes access based on the lifecycle of the ticket.

Context

Organizations use ITSM (IT service management) to manage how IT and DevOps deliver services to employees. Ticketing systems, such as Jira, Linear, Zendesk, ServiceNow have transformed how companies operate internally and measure efficiency. Opal is leveraged by modern enterprises to implement least privilege and access management workflows. One of our core tenants is to meet organizations in their processes today.

‍

Therefore, we have enabled two advanced ticketing integrations:

* Audit Tickets: Access requests in Opal can create tickets in your ticketing provider. All subsequent changes in Opal, such as approval decisions and comments, will be automatically update the ticket.

* Access Tickets: Requests in Opal can be binded to support tickets. Once the ticket has been marked as completed, access in Opal will be automatically revoked.

‍

Feature Release

Audit Tickets

After admins have configured their ticket provider, all access requests created in Opal will automatically create a ticket in the ITSM. This is known as the Audit Ticket.

Furthermore, updates to the request, such as comments and approval status, will be automatically logged into the ticket as well.

Access Tickets

In Slack and Web, employees can bind tickets to requests. This is enables dynamic least privilege. Rather than expiring access based on a fixed time period, companies can expire access after the completion of events, otherwise known as event-based access. After tickets are marked as completed, Opal will automatically expire the user's access.

For extra sensitive resources, administrators can also enforce all requests to require support tickets.

‍

About Opal:

Opal is the centralized authorization platform for IT and Infrastructure teams. Deeply integrated with developer infrastructure, SaaS applications, and custom internal tools, Opal enables companies to implement scalable access management.

Want to see it yourself? Contact hello@opal.dev or book a meeting here for a personalized demo.