Access Mapping

See who and what can access protected data

Understand how access is granted, identify access that looks too broad, and review human and non-human identities in one place, including applications, services, and AI agents.

Get a demo
Ubiq Access Graph showing human and non-human identities connected through access groups to protected datasets

Why use Ubiq Access Mapping

Key benefits

  • See which identities belong to each group: Connect users, applications, services, analytics tools, and AI agents to the groups they are associated with.

  • Review human and non-human identities together: See people and workloads in one consistent access view.

  • Understand group membership: Identify the groups that connect each identity to Ubiq access groups.

Group membership

See which identities are associated with each group

Finance

Identity provider group

Emily CarterPower BI Service

HR

Identity provider group

Jake Thompson

Service Accounts

Identity provider group

rag-servicesvc-customer-portal

Key features

  • Identity-to-dataset visibility: See which protected datasets each user, application, service, analytics tool, or AI agent can reach.

  • Access-group context: Understand which Ubiq access group connects an identity to protected data.

  • Shared access relationships: See when multiple identities or groups connect to the same protected dataset.

Identity access

See which protected datasets each identity can reach

Emily Carter

Human identity

Access group

Finance-ReadOnly

Customer_PII

svc-customer-portal

Application service

Access group

Data-Engineering

Claims_Records
Support_Tickets

Access activity

  • See top identities: Review which identities are accessing the most protected records and the datasets they access most.

  • Compare dataset activity: Understand access activity across human and non-human identities.

  • Highlight anomalous identity activity: Bring unusual identity and dataset access patterns into focus. Launching soon.

Identity access activity

See the identities accessing protected datasets

Top identities

Last 7 days
IdentityTop datasetRecords
Datadog
Customer_PII128.7M
svc-customer-portal
Customer_PII98.3M
Power BI Service
Payment_Cards76.4M
Emily Carter
Account_Number42.6M

Anomalous events

Launching soon

First-time access to Customer_PII

Identity access signal

Unusual increase in records accessed

Identity access signal

New identity accessing sensitive data

Identity access signal

Answers

Data access governance questions

How Access Mapping connects identity, groups, and sensitive datasets without replacing IAM.

What is data access governance?

Data access governance is the practice of understanding and controlling who can access sensitive data, through which relationships, and under what policy. Ubiq connects that visibility to runtime data outcomes.

What does enterprise access mapping show?

Enterprise access mapping shows how identity-provider groups, human and non-human identities, Ubiq access groups, and protected datasets connect across an access path.

Can Ubiq map non-human identities?

Yes. Ubiq can represent applications, services, analytics tools, API keys, and AI agents alongside human identities in a consistent access view.

Does Access Mapping replace IAM or IGA?

No. The customer’s IAM or IGA system remains the source of identities and groups. Ubiq adds sensitive-data context, access relationships, and data-specific policy.

See who and what can access your protected data

Get a clear view of how human and non-human identities, groups, and protected datasets are connected.

Get a demo