The Pinpoint integration enables security and compliance teams to monitor user access and roles within Pinpoint. By syncing user data from Pinpoint, Drata helps organizations review who has access to the platform and maintain accurate access records for compliance monitoring.
Key Capabilities
User Access Review Data Sync: Import Pinpoint user access data into Drata
Role Visibility: Monitor user roles and permissions within your Pinpoint account
Compliance Monitoring: Maintain visibility into system access to support audit and compliance workflows
This integration supports User Access Review workflows, helping demonstrate compliance with access control policies.
Prerequisites & Data Access
Pinpoint Access Requirements
You must generate a Pinpoint API key with the required permissions.
You must retrieve your Pinpoint account subdomain.
Drata Role Requirements
To create or modify connections, you must have one of the following Drata roles with write access: Admin, Workspace Manager, or DevOps Engineer
Access Reviewers can view the connection page but cannot create or modify connections
Permissions & Required Access
Permission / Access | Why It’s Needed |
Application permissions: Read | Allows Drata to retrieve user access data from Pinpoint |
Department permissions: Read | Allows Drata to retrieve department-level access information |
API Key | Authenticates the integration with Pinpoint |
Subdomain | Identifies the Pinpoint account being connected |
Step-by-Step Setup
Step 1: Generate a Pinpoint API Key
Log in to your Pinpoint account.
Navigate to the API settings section.
Generate a new API key with the following parameters:
API Key Name: Drata
Application permissions: Read
Department permissions: Read
Copy the generated API key and store it securely.
Expected outcome:
You have generated a Pinpoint API key with the required permissions.
Step 2: Retrieve Your Pinpoint Subdomain
Log in to your Pinpoint account.
Look at the URL in your browser when accessing Pinpoint.
Example:
If the URL is:
https://company.pinpointhq.com
The subdomain is:
company
Expected outcome:
You have identified the Pinpoint subdomain required for the integration.
Step 3: Connect Pinpoint in Drata
Log in to Drata → go to the Connections page.
Navigate to your Available Connections.
Search for and start the Pinpoint connection process.
Enter the following information when prompted:
Subdomain
API Key
Expected outcome:
Pinpoint is successfully connected and user access data begins syncing to Drata.
Important Notes
Authentication method: The Pinpoint integration uses an API key.
Required permissions: The API key must include Read access for both Application and Department permissions.
Security best practice: Store API keys securely and rotate them according to your organization’s security policies.
Network restrictions: If your organization uses a Web Application Firewall (WAF), ensure required Drata IP addresses are allowlisted so the connection can be established.