Inventory Connections
Connections
A connection is one configured connector in your workspace: GitHub, Microsoft 365, Google Workspace, OpenAI or Anthropic, signed in with its own credentials and syncing on its own schedule. A connection syncs a platform's records and members into this workspace. You make one from the catalogue, see Connectors. This page is where you manage the ones you have.
Who can do it
| You want to | You need | Roles |
|---|---|---|
| See the list and a connection's page | connections:read | All six: Owner, Admin, Analyst, Policy author, Fleet operator, Compliance reader |
| Sync now, Pause, Resume, change settings, replace a credential, remove a connection | connections:manage | Owner, Admin, Fleet operator |
The list
Open Inventory › Connections. Select a row to open the connection.
| Column | What it shows |
|---|---|
| Name | The connection's name. |
| Connector | Which platform. |
| Reads | The record kinds it reads. |
| State | One of the states below. |
| Last sync | When it last synced, or "Never". |
| Next sync | "Due now", "In less than a minute", or "In 12 minutes", "In 3 hours", "In 2 days". A paused connection shows "Paused". |
| Findings | Open issues by severity, or "None". |
| Actions this week | How many actions its rules took. |
| Connection ID | The identifier. Hidden until you add the column. |
You can filter by Connector and State.
States
| State | Meaning |
|---|---|
| Connecting | Waiting on the vendor's sign-in. |
| Live | Syncing on its schedule and running its rules. |
| Failing | Its recent syncs failed. It keeps trying. |
| Paused | You paused it. Syncs and rules are stopped. Its records, rule choices and credential are kept. |
| Revoked | The credential was withdrawn. Replace it to run its rules again. |
A connection served from recorded vendor responses carries a MOCK badge. Only a global administrator can make one, and only on a development deployment.
Open a connection
A connection has six tabs.
| Tab | What it holds |
|---|---|
| Overview | Health: State, Failing since with In a row and Last error when syncs fail, Last sync, Next sync, Period, Signs in through. What it reaches: how many record kinds and actions are readable. What it holds: counts per record kind. Issues by severity. Sync history, the ten most recent syncs. |
| Records | What the connection holds, by record kind. Choose a kind to see its records, with External id, First seen and Last seen. |
| Issues | Issues raised by this connection's rules. |
| Rules | Provided by Oxelone: the pack rules the connector ships. This connection's own rules, with New rule. |
| Actions | What its rules did, and what people ran from an issue. Rule or Operator triggered, outcome Done, Failed or Refused. |
| Settings | Name, Sync period, API base where the connector allows one, Credentials, and Remove connection. |
Sync history shows Requested, Started, Finished, Records, Outcome and Asked for by. Outcomes are Requested, Running, Completed, Partial and Failed. A failed sync names the cause: could not be reached, the credential was refused, the rate limit was reached, or the answer could not be read. Asked for by is "A person" or "The schedule".
Sync now
Syncing runs the connector against the platform at once instead of waiting for the next scheduled sync.
- Open the connection.
- On the Overview tab, choose Sync now.
- The console says "Sync requested."
A connection that is already waiting for a sync says "A sync is already waiting to run." and does not queue a second. Only a Live or Failing connection can sync. For any other state the console says:
- Connecting: "Finish connecting this connection before it can sync."
- Paused: "This connection is paused. Resume it to sync again."
- Revoked: "This connection's credential was withdrawn. Replace it to sync again."
Pause and resume
- Open the connection and choose Pause.
- Confirm in the dialog: "Its syncs stop and its rules stop running until it is resumed. Its records, rule choices and credential are kept."
- To start again, choose Resume.
A connection that is still Connecting shows Finish connecting instead. It reopens the vendor's sign-in for a platform install that was abandoned.
Change the schedule or the credential
Under Settings:
- Sync period is a set of presets, shown as "15 min" or "1 h". A preset your plan does not allow is disabled and the console shows the reason.
- Name tells two connections of one connector apart.
- Credentials: choose Replace, enter a New value, and save. The old value stops working as soon as this is saved.
Remove a connection
- Open Settings and choose Remove connection.
- Read Remove this connection? It lists what happens: the credentials are deleted outright, not archived; every issue it raised is closed with a note saying why; it stops syncing and leaves the list.
- Confirm. This cannot be undone.
The console then says how many credentials were deleted and how many issues were closed.
When it goes wrong
| You see | It means |
|---|---|
| No connections yet, "A connection syncs a platform's records and members into this workspace." | Nothing is connected. Browse connectors opens the catalogue. |
| No connections match these filters | Your filters match nothing. |
| "This workspace's connections could not be read." | The list failed. |
| "This connection could not be read." | The connection page failed. |
| "These records could not be read." | The Records tab failed. |
| "This connection's Issues could not be read." | The Issues tab failed. |
| "This connection's actions could not be read." | The Actions tab failed. |
| "A sync could not be requested." | Sync now failed. |
| "This connection could not be paused." / "This connection could not be resumed." | The change was refused. The reason follows. |
| "The vendor's sign-in could not be reopened." | Finish connecting failed. |
| "This credential could not be replaced." | Replace failed. |
| "This connection could not be removed." | Remove connection failed. |
| "Rules appear once the connection is active" | The Rules tab waits while a connection is Connecting, Paused or Revoked. |
| "Mock connections are not available on this deployment, so this one is not synced." | A MOCK connection on a deployment that does not serve them. |
| "changing a connection requires connections:manage in this workspace" | Your role does not hold connections:manage. |
With the API
Not available with an API key. The connection routes are not part of the public API reference.