{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Drata GRC Provider Configuration Guide","siteUrl":"https://docs.synqly.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"introduction","__idx":0},"children":["Introduction"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Drata is a compliance automation platform. It tracks the frameworks your organization is certifying against and the controls within them. It also tracks the tests that monitor those controls and the evidence supporting them. This guide shows you how to create a Drata API key, find your data region, and configure the integration."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":1},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before you begin, ensure that you have:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Access to a Drata account with administrator permissions for the organization you are integrating"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Permission to create and manage API keys in Drata"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"required-permissions","__idx":2},"children":["Required Permissions"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Drata asks you to choose an access level when you create the key."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Access level"},"children":["Access level"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Purpose"},"children":["Purpose"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["All read"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read everything the integration needs, including resources Drata adds later. The integration only reads"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Custom"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read only the resources you select"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["All read and write"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["More access than the integration uses"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If you choose Custom, grant read access to each of these resources:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Workspaces"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Controls"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Monitors"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Devices"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Personnel"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Evidence Library"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Frameworks"]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Leaving one of these out of a Custom key produces a permission error that names the failing request but not the missing scope. You can add scopes to an existing key without creating a new one, as long as it has not expired or been revoked."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"generating-an-api-key","__idx":3},"children":["Generating an API Key"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Create the key in Drata's settings, following the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://help.drata.com/en/articles/6695964-drata-public-api"},"children":["Drata public API help article"]},". Four things about that process affect the integration:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Copy the key and store it in a safe location before you close the dialog. Drata shows it once and cannot retrieve it afterwards"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Choose an expiration you will track, or set it to ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Never"]},". The default is 12 months, and the integration stops authenticating when the key expires"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Leave ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Allowed IP Addresses"]}," empty unless you have a reason to restrict it. Drata only accepts requests from the addresses listed there, and a list that leaves out the integration's addresses blocks every request"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the access level from the section above titled ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#required-permissions"},"children":["Required Permissions"]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["An expired or revoked key cannot be returned to use. You have to create a new one and configure the integration with it."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"finding-your-data-region","__idx":4},"children":["Finding Your Data Region"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Drata hosts tenants in three regions. Read yours from your Drata dashboard address. It carries the region code directly after ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["/main/"]},":"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Dashboard address"},"children":["Dashboard address"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Region"},"children":["Region"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["app2.drata.com/main/NA/..."]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["NA"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["app2.drata.com/main/EU/..."]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["EU"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["app2.drata.com/main/APAC/..."]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["APAC"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["NA"]}," covers North America, ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["EU"]}," the European Union, and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["APAC"]}," Asia-Pacific."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A key issued for one region is not valid in another. A region that does not match your tenant fails to authenticate even when the key is correct. Check the region first if authentication fails."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"configuring-the-integration","__idx":5},"children":["Configuring the Integration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To configure a new Drata integration, provide each of the values as defined below:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Integration Parameter"},"children":["Integration Parameter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Credential"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["This is the API key you created and stored above"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Data Region"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["This is the region you found in the previous section"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"additional-resources","__idx":6},"children":["Additional Resources"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://help.drata.com/en/articles/6695964-drata-public-api"},"children":["Drata public API"]}]}]}]},"headings":[{"value":"Introduction","id":"introduction","depth":2},{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Required Permissions","id":"required-permissions","depth":2},{"value":"Generating an API Key","id":"generating-an-api-key","depth":2},{"value":"Finding Your Data Region","id":"finding-your-data-region","depth":2},{"value":"Configuring the Integration","id":"configuring-the-integration","depth":2},{"value":"Additional Resources","id":"additional-resources","depth":2}],"frontmatter":{"slug":"guides/provider-configuration/drata-grc-setup","seo":{"title":"Drata GRC Provider Configuration Guide"}},"lastModified":"2026-10-26T17:03:29.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/provider-configuration/drata-grc-setup","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}