> ## Documentation Index
> Fetch the complete documentation index at: https://docs.porcia.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Governance & Security

> How Porcia's governance and security features are organized in the app — findings, OAuth grants, shadow IT, workflows, and identities.

Porcia's governance features span several sections of the sidebar. This page maps what exists where so you can find what you need quickly.

***

## Feature map

<CardGroup cols={2}>
  <Card title="Findings" icon="triangle-exclamation" href="/governance/findings">
    Top-level sidebar item. Security posture checks across your apps, accounts, OAuth grants, and extensions — with risk levels and guided remediation.
  </Card>

  <Card title="Shadow IT" icon="eye-slash" href="/governance/shadow-it">
    Top-level sidebar item. Apps discovered via email, browser, or SSO that aren't in your sanctioned catalog. Approve, deny, or replace.
  </Card>

  <Card title="OAuth Grants" icon="plug" href="/governance/oauth-grants">
    Assets → Integrations → OAuth Grants. Full inventory of every third-party OAuth connection, risk-scored. Also includes Risk Score and MCP Connections sub-pages.
  </Card>

  <Card title="Security → Browser" icon="shield" href="/integrations/extension/usage">
    Security signals from the browser extension: AI usage, password signals, file uploads, shared accounts. Five tabs.
  </Card>

  <Card title="Playbooks" icon="list-check" href="/governance/playbooks">
    Workflows → Playbooks. Multi-step operational workflows for offboarding, access reviews, and recurring governance processes.
  </Card>

  <Card title="Pulses" icon="bell" href="/governance/pulses">
    Workflows → Pulses. Async employee outreach via Slack, Teams, or email to verify app usage. History, Automation, Templates, Audit Log tabs.
  </Card>

  <Card title="Rules" icon="bolt" href="/governance/rules">
    Workflows → Rules. Event-based automation — triggers notifications, creates findings, or assigns resources when conditions match.
  </Card>

  <Card title="Access Requests" icon="clipboard-list" href="/governance/access-requests">
    Top-level Requests item. Structured employee request flow with approver review and full audit trail.
  </Card>
</CardGroup>

***

## Identities

The **Identities** section gives you a live directory view from your connected IdPs:

<CardGroup cols={3}>
  <Card title="Users" icon="user">
    `/identities/users` — all directory users with status, department, MFA, and extension enrollment
  </Card>

  <Card title="Groups" icon="users">
    `/identities/groups` — directory groups and memberships from your IdP
  </Card>

  <Card title="Service Accounts" icon="robot">
    `/identities/service-accounts` — non-human identities in your environment
  </Card>
</CardGroup>

***

## Roles and permissions

| Role       | Governance access                                                                       |
| ---------- | --------------------------------------------------------------------------------------- |
| **Admin**  | Full access — revoke grants, resolve findings, run playbooks, send pulses, manage rules |
| **Member** | View findings and grants (read-only), submit access requests, respond to pulses         |

<Card title="Full permission matrix" icon="shield" href="/workspace/roles-permissions">
  See exactly what each role can do across every feature
</Card>