Connecting Xero to Drata allows you to perform access reviews. You can review which users have access to Xero, their roles, and their permission-levels.
Key Capabilities
Access retrieval: Retrieves users and assigned roles from connected systems.
Review enablement: Makes this access data available for review in Drata’s Access Reviews feature.
Account mapping support: Allows external accounts to be mapped to Drata personnel for accurate review and tracking.
Prerequisites & Data Access
Administrator access to your Xero organization
Ability to create and manage a Xero Custom Connection app
Must be assigned one of the following Drata roles: Admin, Workspace Managers, DevOps Engineer.
If you have the Access Reviewer Drata role, you can only view the Connections page.
Permission / Scope | Why It’s Needed | Data Accessed (Read Only) |
Client ID & Client Secret | Authenticate the connection via Xero OAuth | User identity and access metadata |
Step-by-Step Setup
Step 1: Create a Xero Custom Connection app
Copy your Client ID and Client Secret from a Xero Custom Connection app:
Log in to Xero as an Administrator.
Select your Custom Connection app.
Open the app and select Configuration.
Under the Connection section, copy the Client ID and Client Secret.
To create a custom app:
Log in to Xero and go to My Apps:
https://developer.xero.com/app/manage/Select New App.
Enter an app name (for example, Drata User Access Review).
Choose Custom Connection as the integration type.
Select the required read-only scopes for user access data.
Choose an authorize user and complete the authorization flow.
You’ll receive a confirmation email once authorization is complete.
After authorization, open the app’s Configuration page.
Copy the Client ID and generate the Client Secret.
Step 3: Connect Xero inside Drata
In Drata, go to Connections.
Select the Available Connections tab.
Search for Xero or filter by User Access Review.
Select Connect.
Enter the Client ID and Client Secret from Xero.
Save the connection.
Expected outcome:
Drata successfully authenticates with Xero and begins syncing user access data.