The Segment integration enables security and compliance teams to automate User Access Reviews (UAR) by syncing user access data from Segment. This allows organizations to review who has access to Segment, identify potential permission risks, and maintain accurate records for compliance audits.
Key Capabilities
User Access Review Data Sync: Import Segment user accounts to support access review workflows
Access Governance: Monitor which users have access to Segment within your organization
Compliance Monitoring: Maintain visibility into system access to support security and audit requirements
This integration supports User Access Review workflows, helping demonstrate compliance with access control policies.
Prerequisites & Data Access
You must have Administrator access in your Segment workspace.
You must create a Segment Workspace Public API Token.
Important: Create a Public API Token, not a Config API Token.
Public API tokens provide the required administrative permissions for Drata to retrieve user access data.
To create or modify connections in Drata, you must have one of the following Drata roles with write access: Admin, Workspace Manager, DevOps Engineer
Drata Access Reviewers
Access Reviewers can view the connection page but cannot create or modify connections.
Permissions & Data Table
Permission/Scope | Why It’s Needed |
Public API Token | Allows Drata to retrieve Segment workspace user data for access reviews |
Step-by-Step Setup
Step 1: Create a Segment Public API Token
Log in to your Segment workspace.
Navigate to your workspace settings.
Navigate to the Access Management tab, and click Tokens.
Important:
Create a Public API Token, not a Config API Token. Public tokens provide the permissions required for Drata to retrieve user access information.
Expected outcome:
You have generated a Segment Public API Token that will be used to authenticate the integration.
Step 2: Connect Segment in Drata
Log in to Drata → go to the Connections page.
Navigate to your Available Connections.
Search for and start the Segment connection process.
Enter the Segment Public API Token when prompted.
Expected outcome:
Segment is successfully connected and user access data begins syncing to Drata.
Important Notes
Authentication method: The Segment integration uses a Workspace Public API Token.
Token type requirement: Using a Config API Token will prevent the integration from retrieving the required user access data.
Security best practice: Store API tokens securely and rotate them according to your organization’s security policies.