> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/inventory/access-inventory.md).

# Access inventory

Browse and query your entire IAM configuration. Combine data from identity providers, IAM policies, access logs, and P0's IAM Privilege Catalog.

The inventory page lets you browse and query your entire IAM configuration, combining data from your identity provider, IAM policies, your access logs, and P0's [IAM Privilege Catalog](https://catalog.p0.dev).

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-d6a917e2433a01b52b8c4553ac2b8594fb148090%2FScreenshot%202025-04-28%20at%202.35.20%20PM.png?alt=media" alt="Access inventory graph visualization showing identities, entitlements, and resources connected by lateral movement paths" width="563"><figcaption></figcaption></figure>

### Search interface

When you land on the **Inventory** page, you'll be presented with a search interface. At the top of this view you'll see a query control, and, below, all items that match your query. By default results are returned in a asset table. Everything in your IAM configuration matches an empty search, so you'll see everything listed at first.

#### Asset list

To search for something specific, type any text included in that IAM datum into the "where" bar:

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-a3985e7ea48f666b89baf131a3c2bf5754ff3afa%2Fimage.png?alt=media" alt="Inventory search results table showing entitlements for bucket resources with columns for Principal, Privilege set, Resource, and Risks" width="563"><figcaption></figcaption></figure>

If you're new to querying, [Query Language Basics](/inventory/query-search/query-language-basics.md) walks you through the core search terms and operators from scratch. For detailed information on how to query your data, see [Query search](/inventory/query-search.md). You can also have P0 help you construct queries by hovering over items:

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-831ee154bc105b95dd183d0c5d6425c7dd85420c%2Fimage.png?alt=media" alt="Inventory item hover menu showing options to show or hide identities of this type for query refinement" width="563"><figcaption></figcaption></figure>

Clicking "show" or "hide" will update your query to show or hide the selected items.

You can display credentials, entitlements, identities, or resources by selecting these in the "show" selection:

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-92d9cdf33f425d12903d37b55d70fcf0aaadf8b7%2Fimage.png?alt=media" alt="Inventory Show dropdown menu with Credentials, Entitlements, Identities, and Resources options for filtering results" width="563"><figcaption></figcaption></figure>

For each item, you can see detailed information by selecting "view," which will take you to the relevant [Result details](/inventory/result-details.md) page.

#### Graph visualization

Results can also be viewed as a graph visualization. You will see all items that can reach your search terms, as well as the access paths that connect them.

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-39bc7e089f6816101c70979e61716da7da2096c6%2Fimage.png?alt=media" alt="Access inventory graph visualization showing identities connected to GCP role bindings, Cloud Storage service, and a storage bucket" width="563"><figcaption></figcaption></figure>

You can get more information on any node in your access graph by clicking on it, which will open a view of all that graph node's properties.

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-b8517e9aad12813928290856c56b83232a0253bc%2Fimage.png?alt=media" alt="Graph node detail panel showing GCP Role Binding properties including principal, role, parent project, and cross-resource access status" width="563"><figcaption></figcaption></figure>

### Creating custom monitors

You create custom monitors from the Inventory page. Results from these monitors will appear in [Monitor Results](/posture/monitor-results.md) on every scan of your environment. To create a custom monitor:

* Select a "show" option and enter a "where" query
* After ensuring that the displayed results match your expectations, click **Save Search**
* Enable the "Create a monitor for this search?" toggle, then follow the prompts to add a title, description, and severity for your monitor

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-cde2eb0d8485cd6be70d81ab0757c840cdadcdbc%2Fimage.png?alt=media" alt="Create New Monitor dialog with query, label, description, and priority fields for a custom BigQuery grants monitor" width="375"><figcaption></figcaption></figure>
