Skip to content

Integrating SailPoint with Gremlin

Gremlin is an enterprise reliability and Chaos Engineering platform that helps engineering organizations proactively find and fix availability risks before they impact end users. The Gremlin connector aggregates users, company roles, and teams for account and entitlement visibility. This document provides instructions to configure a new direct connection to a Gremlin source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Gremlin connector supports the following:

Account Management

  • Aggregate Account (Users)

Entitlement Management

  • Aggregate Group (Company Roles)
  • Aggregate Group (Teams)

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  1. Sign in to Gremlin with a user account. A Company Owner or Company Sec Admin account is recommended so the connector has full visibility into users, teams, and company roles.
  2. Go to Settings > User Settings > API Keys.
  3. Select New API Key.
  4. Enter a unique Name and an optional Description for the key.
  5. Select Save to generate the API key. Copy the key value immediately, because it is only displayed once.
  6. Locate your Company ID from the left sidebar of the Gremlin dashboard at http://app.gremlin.com.
  7. Copy and securely store the Base URL, API Token, and Company ID, which are required during connector configuration.

Note

  • API keys are linked to a specific user account. If the user is deactivated or removed from the company, the key is automatically revoked.
  • A maximum of 5 active API keys can exist per user at any given time.
  • Company administrators with the COMPANY_SECURITY_WRITE privilege can configure API keys to automatically expire after a set duration. If this is enabled, an expired key must be regenerated.
  • A revoked key must be reinstated or replaced with a newly generated key before it can be used to authenticate again.

For more information about obtaining an access token, refer to the Gremlin API keys documentation.

Required Permissions

Who Can Generate an API Token

Any Gremlin user can generate a personal API key from their own account settings. API keys are per-user and are not gated behind a specific company role.

How Permissions Affect Connector Access

API tokens inherit the permissions of the user who generated them. If the user can view people, teams, and roles in Gremlin, the token can fetch them through the API. If the user lacks permission to see certain records in the UI, the token cannot fetch those records through the API.

Typical role considerations include:

  • Company Owner - Full administrative access, including company security, users, teams, and roles. This role can generate tokens and fetch all user, team, and role data.
  • Company Sec Admin / Company Manager / Company Coordinator / Company User - These roles can have varying access. By default, each default company role is granted COMPANY_USERS_READ and TEAMS_READ, so tokens generated by users in these roles can fetch users and teams through the API.
  • Company Owner and Company Sec Admin - By default, these roles hold ROLES_WRITE. If your company has customized its role-based access control (RBAC) configuration, users without this privilege may have limited ability to view or modify company role definitions.

For more information about Gremlin, refer to the Gremlin website, Gremlin documentation, and Gremlin API reference.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.