> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oleria.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Navigate and search the Access Graph

> Search the Access Graph to find a starting point, then trace access paths from an account to its resources or from a resource back to every account that can reach it.

The Access Graph lets you trace access relationships dynamically - from an account to the resource instances it can reach, or from a resource instance back to every account, role, and group that has access to it. The graph updates in real time as you interact, making it practical for investigating intricate access paths and detecting unexpected connections.

## Search the graph

Search lets you find identities, application accounts, or resource instances by account email or resource instance name, then build a graph from the results.

<Note>
  Access Graph shows the top 5 search results. To see all results, select **View all results** to open the Access Inventory page.
</Note>

### Search by accounts

<Steps>
  <Step title="Select the Accounts search type">
    In the search bar, select **Accounts** from the dropdown menu.
  </Step>

  <Step title="Enter the account email">
    Type the account email address. A list of matching application account nodes displays.

    <Note>
      If the email address contains reserved characters, wrap it in double quotes. Example: `"demo-salesforce-group+anthonylee@oleria.com"`
    </Note>

    ![Access Graph search showing account results across multiple applications](https://uploads-ssl.webflow.com/63fc7e99bfef1938067db500/66015588eefb8e79b6e2e582_J9vZJ1aZcs1rZxGGTwQrlR5fc3VmMSuBeH-GKkn5rmmYaESi2MrFrj-0T_666dcugvoWz73OC5ORNlrZv2luSc713UrJ9UPJvdxE50wOn4YPMpshncez_D8KW-nTBJuHmN5On-AXrQZLVwabhs-SRN0.png)
  </Step>

  <Step title="Select an account node">
    Select an account from the results to build the graph. If the account exists in multiple application instances (for example, Salesforce Production and Salesforce Dev), the graph shows a separate node for each.
  </Step>
</Steps>

### Search by resource instances

<Steps>
  <Step title="Select the Resource Instances search type">
    In the search bar, select **Resource Instances** from the dropdown menu.
  </Step>

  <Step title="Enter the resource instance name">
    Type the resource instance name. A list of matching resource instance nodes displays.

    ![Access Graph search showing resource instance results across multiple applications and environments](https://uploads-ssl.webflow.com/63fc7e99bfef1938067db500/6601558821cc177b1c9516ac_12zbFQlebYrMGofs5obTfH8XI_oGWZE38nQAzXGPVdzu5rKB_yrIS5in2qCGNgPF-uRl5lHvKVBJiXZpENeNm1904zsfAZd4Etb6-8uqaKCxzpbxZhL5iPGZLW4KIWW60UVKuJaPTc-WYPbWNVvCEik.png)
  </Step>

  <Step title="Select a resource instance node">
    Select a resource instance from the results to build the graph. If the instance exists in multiple applications or environments, the graph shows a separate node for each.
  </Step>
</Steps>

## Navigate from an account to a resource instance

Use this path when you want to understand what a specific user or machine account can access.

<Steps>
  <Step title="Search for the account">
    Select **Account** from the search dropdown and enter the account email. The graph displays all applications the account has access to.
  </Step>

  <Step title="Select the application account node">
    Select an application account node to open its side panel. The panel shows details including email, user ID, assigned roles, group memberships, and resource access.
  </Step>

  <Step title="Add a resource to the graph">
    Select any resource from the side panel. The graph builds out to show that resource node.
  </Step>

  <Step title="Select the resource node">
    Select the resource node to open a side panel listing the resource instances the account can access.
  </Step>

  <Step title="Add resource instances to the graph">
    Select one or more resource instances to complete the graph. You now see the full access path from the account to its resource instances.

    ![Access Graph showing account Anthony Lee with Salesforce access, System Administrator role, group memberships, and resource instance access](https://uploads-ssl.webflow.com/63fc7e99bfef1938067db500/660157bcc1c5453589483949__EQS0xJeorgZkKdAytQec1klH9B0dDmMReFVre3aqIqqVu4YRnulAdgij2Wmmd-J8-Ha50pPeaaAQxZlzPNszCRD_0F4wEw2uIl8bs6LX7UYahxH26wZB_xCLDczX7GvpHLqBCVcOvrJEPJldOJifsw.png)
  </Step>
</Steps>

## Navigate from a resource instance to accounts

Use this path during an incident investigation when you need to know every identity that can reach a specific resource.

<Steps>
  <Step title="Search for the resource instance">
    Select **Resource instance** from the search dropdown and enter the resource name. The graph displays the resource instance node.
  </Step>

  <Step title="Select the resource instance node">
    Select the resource instance node to open its side panel. The panel lists all accounts that have access to it.
  </Step>

  <Step title="Add accounts to the graph">
    Select one or more accounts from the side panel to expand the graph. Each selected account appears as a node connected to the resource instance.
  </Step>

  <Step title="Explore the access path">
    Select any account node to open its side panel and trace how it obtained access - through a direct role assignment, group membership, or inherited permission.
  </Step>
</Steps>

## Contact us

For questions, contact us at [support@oleria.com](mailto:support@oleria.com).