> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/inventory/access-inventory.md).

# Access Inventory

The inventory page lets you browse and query your entire IAM configuration, combining data from your identity provider, IAM policies, your access logs, and P0's [IAM Privilege Catalog](https://catalog.p0.dev).

<figure><img src="/files/YZ8d0Xt93rPI8TvMbrYq" alt="Access inventory graph visualization showing identities, entitlements, and resources connected by lateral movement paths" width="563"><figcaption></figcaption></figure>

### Search interface

When you land on the **Inventory** page, you'll be presented with a search interface. At the top of this view you'll see a query control, and, below, all items that match your query. By default results are returned in a asset table. Everything in your IAM configuration matches an empty search, so you'll see everything listed at first.

#### Asset list

To search for something specific, type any text included in that IAM datum into the "where" bar:

<figure><img src="/files/aMZy4hPz53kDXquFyZjU" alt="Inventory search results table showing entitlements for bucket resources with columns for Principal, Privilege set, Resource, and Risks" width="563"><figcaption></figcaption></figure>

If you're new to querying, [Query Language Basics](/inventory/query-search/query-language-basics.md) walks you through the core search terms and operators from scratch. For detailed information on how to query your data, see [Query Search](/inventory/query-search.md). You can also have P0 help you construct queries by hovering over items:

<figure><img src="/files/A60v3E2uovGWioDR6TBE" alt="Inventory item hover menu showing options to show or hide identities of this type for query refinement" width="563"><figcaption></figcaption></figure>

Clicking "show" or "hide" will update your query to show or hide the selected items.

You can display credentials, entitlements, identities, or resources by selecting these in the "show" selection:

<figure><img src="/files/EnKwErLzMDeqd5Y0bDGb" alt="Inventory Show dropdown menu with Credentials, Entitlements, Identities, and Resources options for filtering results" width="563"><figcaption></figcaption></figure>

For each item, you can see detailed information by selecting "view," which will take you to the relevant [Result Details](/inventory/result-details.md) page.

#### Graph visualization

Results can also be viewed as a graph visualization. You will see all items that can reach your search terms, as well as the access paths that connect them.

<figure><img src="/files/JHULnwQh64nTDKP1MdvJ" alt="Access inventory graph visualization showing identities connected to GCP role bindings, Cloud Storage service, and a storage bucket" width="563"><figcaption></figcaption></figure>

You can get more information on any node in your access graph by clicking on it, which will open a view of all that graph node's properties.

<figure><img src="/files/plNu367bLSyKGxbVqzfS" alt="Graph node detail panel showing GCP Role Binding properties including principal, role, parent project, and cross-resource access status" width="563"><figcaption></figcaption></figure>

### Creating custom monitors

You create custom monitors from the Inventory page. Results from these monitors will appear in [Monitor Results](/posture/monitor-results.md) on every scan of your environment. To create a custom monitor:

* Select a "show" option and enter a "where" query
* After ensuring that the displayed results match your expectations, click **Save Search**
* Enable the "Create a monitor for this search?" toggle, then follow the prompts to add a title, description, and severity for your monitor

<figure><img src="/files/PXVZWdTrq9RNo5bsF7z0" alt="Create New Monitor dialog with query, label, description, and priority fields for a custom BigQuery grants monitor" width="375"><figcaption></figcaption></figure>