Connectors

A connector gives 0zone read-only access to one provider account. 0zone uses it to list what your company runs there: machines, gateways, buckets, DNS records, SSO apps and OAuth grants. Each provider has its own page with the steps.

What 0zone does with the access

• Lists resources and their settings.
• Reads network and firewall rules, so the attack graph only links two machines when a rule allows traffic between them on a port.
• Adds public hostnames and IPs to discovery for that company.

What 0zone never does

• Create, change or delete anything in your account.
• Read file, message or model contents unless you turn that on separately.
• Store a password. Connectors use API tokens, OAuth or a role you can revoke.

Every request goes through a client that only allows read calls. A connector page lists the exact role or scope to grant. If a credential has more access than it needs, 0zone warns you before saving it.

Removing access

Delete the connector in 0zone, then revoke the token, app or role at the provider. The provider page for each connector says where.