> ## Documentation Index
> Fetch the complete documentation index at: https://www.c1.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Gain visibility into your access data

> The Inventory page provides a unified view of identities, resources, and sensitive secrets.

{/* to look up secret types, search for TRAIT_SECRET in the Baton GitHub org */}

## View all resources, identities, and select secrets

The **Inventory** page gives you a single-pane-of-glass view of all the identities and resources synced to C1, as well as insight into key sensitive credentials generated in select integrations. Use the sort and filter tools on each tab to quickly zero in on the info you need.

<Frame>
  <img src="https://mintcdn.com/conductorone/h5joVKNi-Qp3eZGr/images/product/assets/inventory.png?fit=max&auto=format&n=h5joVKNi-Qp3eZGr&q=85&s=ab9a27ec1e03e2759fa1076bf6086b36" alt="A screenshot of the Inventory page, showing the Identities tab with the service accounts filter engaged." width="2802" height="1388" data-path="images/product/assets/inventory.png" />
</Frame>

* The **Identities** tab shows all identities, including user, service, and system accounts.

* The **Resources** tab shows all resources with their associated entitlements and the number of accounts granted access to each resource

* The **Secrets** tab shows secrets from the following connectors (if the connectors are configured to sync secrets):

  | Connector                                   | Secrets synced                 |
  | :------------------------------------------ | :----------------------------- |
  | AWS                                         | Access keys                    |
  | Datadog                                     | API keys                       |
  | GitHub                                      | API keys                       |
  | Google Cloud Platform with Google Workspace | API keys, service account keys |
  | Okta                                        | API tokens                     |
  | Oracle Cloud Infrastructure                 | API keys                       |
  | Rootly                                      | Secrets                        |
  | Snowflake                                   | RSA public keys                |

<Tip>
  **More secret types and providers coming soon!**

  We're working to expand the range of secret types and the list of supported integrations that pull in secrets data. We'll announce updates in the [release notes](/product/release-notes) and add them to this page.
</Tip>

## Configure your integrations to pull in secrets data

Before you begin, make sure you've configured your integration to sync secret data.

(No special configuration action is needed to sync secrets from Rootly.)

### Configure Okta, GitHub, AWS, Snowflake, or Datadog to sync secrets

If your Okta v2, GitHub v2, AWS v2, Snowflake v2, or Datadog v2 connector is already set up, follow the instructions below to enable syncing secrets:

<Steps>
  <Step>
    Navigate to **Integrations** > **Connectors** and locate your connector in the list.
  </Step>

  <Step>
    In the **Settings** area of the connector setup page, click **Edit**.
  </Step>

  <Step>
    Click the checkbox to **Sync secrets**, then click **Save**.
  </Step>
</Steps>

**Done.** The next time the connector syncs, it will begin publishing information about secrets on the **Secrets** tab. You can wait for the connector's next scheduled sync, or navigate to the connector's page in C1 and click **Sync now**.

### Configure Google Cloud Platform to sync secrets

If your Google Cloud Platform with Google Workspace connector is already set up, follow the instructions below to enable syncing secrets:

<Steps>
  <Step>
    In the C1 project in Google Cloud Platform, search for "API keys" and enable it.
  </Step>

  <Step>
    Next, grant the API Keys Viewer Role to the service account you created for C1. Navigate to **IAM & Admin** > **IAM**.
  </Step>

  <Step>
    On the IAM page, find your Service Account in the list on the Principals tab.
  </Step>

  <Step>
    Click the icon to edit the Service Account, then click **Add another role**.
  </Step>

  <Step>
    Search for and select **API Keys Viewer**.
  </Step>

  <Step>
    Click **Save**.
  </Step>
</Steps>

**Done.** The next time the Google Cloud Platform connector syncs, it will begin publishing information about API tokens and service account keys on the **Secrets** tab. You can wait for the connector's next scheduled sync, or navigate to the connector's page in C1 and click **Sync now**.

## Track unused secrets

The **Secrets** tab shows the expiration and last used date of each API token and service account key. To view the details of an unused secret:

<Steps>
  <Step>
    Navigate to **Explore** > **Inventory**.
  </Step>

  <Step>
    Click **Secrets**.
  </Step>

  <Step>
    Locate the API token or service account key you wish to investigate and click the associated name in the **Identity** column.
  </Step>

  <Step>
    The identity's details page opens. All secrets associated with the identity are shown on the **Secrets** tab. Any active alerts about unused tokens or keys are shown at the top of the page. Click **View all alerts** to learn more.
  </Step>
</Steps>

<Frame>
  <img src="https://mintcdn.com/conductorone/6mEM8xCnWus9k8UY/images/product/assets/secret-alert.png?fit=max&auto=format&n=6mEM8xCnWus9k8UY&q=85&s=d2d8035ca596cb02d2c7c150c761bece" alt="A screenshot of an identity's details page, showing one active alert for an API token that has not been used in two days." width="2386" height="1085" data-path="images/product/assets/secret-alert.png" />
</Frame>