All Collections
Control Tests
Test: Only Authorized Employees Access Version Control
Test: Only Authorized Employees Access Version Control

Drata uses OAuth to access your company's Identity Provider and version control system ensuring access is permitted correctly.

Ashley Hyman avatar
Written by Ashley Hyman
Updated over a week ago

ASSOCIATED DRATA CONTROL

This test is part of the Version Control Can Only By Accessed By Authorized Employees control that ensures all users of your company version control system are authenticated with their company accounts.

WHAT TO DO IF A TEST FAILS

If Drata finds users within your version control system that are not reflected via their company accounts the test will fail. With a failed test you will receive a list of users within your version control system that do not have a matching company account.

To remediate a failed test, you will need to either create IdP accounts for these version control system users or revoke access for these users. In the event that users do not have their company email attached to their version control account you will need to notify them to properly associate their company account.

STEPS TO REMEDIATE

  1. Log in to Drata as an admin

  2. Ensure that your IDP, Infrastructure, and Version Control providers are connected

  3. Navigate to the Personnel page

  4. Link Version Control accounts to your users or mark them as service accounts.

Did this answer your question?