> ## Documentation Index > Fetch the complete documentation index at: https://docs.oleria.ai/llms.txt > Use this file to discover all available pages before exploring further. # Read the Access Graph > Understand the nodes, edges, node details, activity overlay, and Entitlement Graph that make up the Access Graph. The Access Graph is a visual map of how accounts connect to applications, groups, roles, and resource instances. This page explains how to read what's on screen - nodes, edges, node details, the activity overlay, and the Entitlement Graph - so you can navigate access relationships with confidence. ## Nodes and edges Each data entity in the graph is a **node**. Nodes are styled by entity type to make them visually distinct. Connections between nodes are **edges** that represent how access flows from one entity to another. ### Nodes | Node type | Description | | :------------------ | :---------------------------------------------------------------------------------------------------------------------------- | | Identity | Your organization's unique user profile, based on an email alias. An identity can have accounts across multiple applications. | | Application account | A user account within a specific application - for example, an Anthony Lee account in Salesforce Production. | | Group | A collection of application accounts that share access permissions within an application. | | Role | A set of permissions within an application that can be assigned directly to accounts or to groups. | | Resource | A category of data entity within an application - for example, a Salesforce object type or a Google Drive folder type. | | Resource instance | A specific instance of a resource - for example, a specific Salesforce record or a specific Google Drive folder. | ### Edges Edges represent the access relationships between nodes. The direction of an edge shows how access is granted - for example, an edge from a role node to a resource instance node means that role grants access to that resource instance. Edge thickness reflects access frequency when the activity overlay is enabled: thick edges indicate high usage, thin edges indicate low usage, and dotted edges indicate zero usage. ## Node details Selecting a node opens a side panel with details about that entity - its context, permissions, and connections. **Example:** Select the node for Anthony Lee to open a side panel showing his email, user ID, role, user groups, and permissions. In this example, Anthony has a seed admin role, belongs to the engineering, board, sales, HR, and IT support groups, and has permission to access eight resource instances. ![Access Graph user details panel for Anthony Lee](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/67c04c421203c964eebb5470_AD_4nXcZ_PZclN9XDMW7appSMVOpIu2p5aLIa425-N2bHKg4Javawdu_U-nZ4AbOIqanUGVTWAGgVrRT6bfjDZOwFdhyoB7qV2aabi-61r5hGccYNyEU_RLTpNxCLjUab8dSY25Rdyl9AecLtbs4tZAPZn3hBwBI.png) ## Activity overlay The activity overlay shows how frequently each account uses the access it has, rendered directly on the graph as edge thickness. | Line style | Meaning | | :---------- | :-------------------- | | Thick line | High access frequency | | Thin line | Low access frequency | | Dotted line | Zero access | This lets you immediately identify unused access and decide what to revoke. **Example:** Anthony Lee, Mary Johnson, and Oleria Connector all have access to the Comic Movies file. Anthony accesses it frequently (thick line), Mary accesses it occasionally (thin line), and Oleria Connector has never accessed it (dotted line). Because the Oleria Connector has zero activity, the admin can remove that access. ![Activity overlay showing thick, thin, and dotted access paths for three accounts on the Comic Movies file](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/67c04c42796a345216427f73_AD_4nXdfW6LzoWGIPCNl61KOKBaBoeNV9m3EIe941Q0QkHmSEjxyFzogIAl-YqrutbALKUCe5dV7mF-dqd-DtdK2ihVG6Mrs4XGawA_ItvJ6VbtPH1BAsAbs0IUOu3-tPPwisMm53ukCOw.png) ## Entitlement Graph The Access Graph maps access from application accounts to resource instances, but it doesn't show the identity-to-application layer on its own - which applications an identity can reach, how they got that access, and how often they use it. The Entitlement Graph fills that gap. The Entitlement Graph answers three questions: * Which applications does a user identity have access to? * How did they get that application access - directly, through a group, or through an IdP? * How frequently do they access each application? Search for an identity account. The graph displays the identity nodes in the Access Graph framework. Select an identity node to open its side panel. In the side panel, select an application account to load the Entitlement Graph for that identity. The graph shows all applications the identity has access to, with edges representing how that access was granted. ![Entitlement Graph showing identity-to-application access relationships with access frequency indicators](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/67c0309992329ef2867f66db_AD_4nXdgCOxoDBoy2QyApa9HJCO8nXXu-TAmodPN5iIAMoA7MXc2haP1zq4pnXVJlCtFITv_KbKVMpnq5bJnZvi8_3yJKXXJbIfNZOv_fLtIpYdSeFCrC149HzOC780hGOmSlSeOW3SA.png) By default, both Access and Entitlement Graphs are enabled and displayed together. To focus on one graph type at a time, use the **Graph Types** panel: select **Entitlement** to show only the identity-to-application layer, or select **Access** to show only the application account-to-resource layer. ![Access Graph displayed in isolation after selecting Access from Graph Types](https://cdn.prod.website-files.com/63fc7e99bfef1938067db500/67c0309989bff910eb9c4e82_AD_4nXc4NTr0fslEheZ3b9QcCsEX-zeh1j2e-5k93Vsq1f-7sIobW23LDn7NSlk2phZBBA3gFb4uuVxnfdGBme0-rvl0Z0_X5d5bpaFmQ1WBDoWDQoLLCo-CijQKPmLeVWJjcf5sjjiU.png) ## Contact us For questions, contact us at [support@oleria.com](mailto:support@oleria.com).