# Access Inventory

Use P0's access inventory to view your production assets, all the identities that can access them, and associated access risks.

*IAM assessment is currently available for AWS, Google Cloud, Kubernetes, Okta, and Google Workspace.*

### Features

* Combines IAM data from disparate sources, including your identity provider, your IAM policies, and your cloud access logs
* Evaluates issues based on risks of individual privileges, using P0's comprehensive open-source [IAM Privilege Catalog](https://catalog.p0.dev)
* Detect lateral movement across identities and clouds

### How it works in P0

P0 connects to your IAM systems, reading your configuration.

<div data-full-width="false"><figure><img src="/files/CUPaxJvJkGcUtKNn5vOn" alt="P0 data collection progress indicator showing Collecting Data at 3% while fetching IAM policy data" width="375"><figcaption></figcaption></figure></div>

P0 builds a complete end-to-end access graph for your environment:

<figure><img src="/files/YZ8d0Xt93rPI8TvMbrYq" alt="Access inventory graph visualization showing identities, entitlements, and resources connected by lateral movement paths" width="563"><figcaption></figcaption></figure>

You can query your access graph to find sensitive access to specific resources, specific risks, or more:

<figure><img src="/files/Sq4QCPWWtLJ14mnLW61K" alt="Inventory query results table filtered by storage exfiltration risk showing principals, roles, and affected resources" width="563"><figcaption></figcaption></figure>

### Get started with P0's access inventory

Getting set-up and collecting your organization's inventory will take about 15 minutes.

1. Sign up for a P0 account at [p0.app/create-account](https://p0.app/create-account).
2. Follow the instructions in [Creating an Environment](/environments/creating-an-environment.md).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.p0.dev/readme/access-inventory.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.