The Dixa integration enables security and compliance teams to automate User Access Reviews (UAR) by syncing user access data directly from Dixa. This helps organizations review who has access to Dixa and maintain accurate access records for compliance monitoring.
Key Capabilities
User Access Review Data Sync: Import Dixa user account data into Drata
Access Governance: Monitor which users have access to your Dixa environment
Compliance Monitoring: Maintain visibility into system access to support audit and compliance workflows
This integration supports User Access Review workflows, helping demonstrate compliance with access control policies.
Prerequisites & Data Access
Dixa Access Requirements
You must have the Administrator role in your Dixa account.
You must generate a Dixa API token.
Drata Role Requirements
To create or modify connections, you must have one of the following Drata roles with write access: Admin, Workspace Manager, or DevOps Engineer
Access Reviewers can view the connection page but cannot create or modify connections
Permissions & Required Access
Permission / Access | Why It’s Needed |
API Token | Allows Drata to authenticate and retrieve user access data from Dixa |
Step-by-Step Setup
Step 1: Generate a Dixa API Token
Log in to your Dixa account.
Navigate to the API token management section.
Generate a new API token.
Copy the generated API token and store it securely.
For detailed instructions, refer to the Dixa documentation on creating API tokens.
Expected outcome:
You have generated the Dixa API token required for the integration.
Step 2: Connect Dixa in Drata
Log in to Drata → go to the Connections page.
Navigate to your Available Connections.
Search for and start the Dixa connection process.
Enter the API token when prompted.
Expected outcome:
Dixa is successfully connected and user access data begins syncing to Drata.
Important Notes
Authentication method: The Dixa integration uses an API token.
Security best practice: Store API tokens securely and rotate them according to your organization’s security policies.
Network restrictions: If your organization uses a Web Application Firewall (WAF), ensure required Drata IP addresses are allowlisted so the connection can be established.