Integrations · Keycloak
Keycloak access reviews without the spreadsheet chase
Acciew reads who has an account in Keycloak and what each person can do through groups and roles, and asks their manager.
Read-only. Also works with GitHub and AWS.
An example
Every access comes with its reason.
Dana has billing admin in the billing app. Why? She is in the Finance Admins group, which sits inside the Finance group, which has that role. Her manager sees that and can say: she moved to Support, remove it.
- Dana is in the Finance Admins group.
- The Finance Admins group sits inside the Finance group.
- The Finance group has the billing admin role.
How it works
Three steps to a finished review.
- 1
Connect
Your engineer gives Acciew read-only access. Nothing changes.
KeycloakCorp loginRead-onlyRead in full · 214 accountsGitHubnorthwindRead-onlyRead in full · 186 membersAWSProductionRead-onlyRead in full · 112 users and rolesSample data. - 2
Decide
Each manager gets an email link: approve, reject or change.
Your review · 3 of 12Sam · repository accessApprovedDoes Dana still need billing admin?Through the Finance Ops groupApproveRejectChangeMoved to Support in August.SavedAlex · support toolsWaitingSample data. - 3
Hand over
Download one pack: the full list, every decision, the report.
PersonSystemAccessDecisionacciew · Evidence packPDFQ4 2026 user access reviewFinalized and confirmed · every access decidedSample data.
Access review coming up? Run it with us.
Design partners get the product early, help setting up their first review, and a say in what we build next.
For your engineer · what Acciew needs from Keycloak
A service account in Keycloak with read-only roles. With it, Acciew reads accounts, groups, roles and who holds them, and, if your Keycloak stores them, last sign-ins. It changes nothing in Keycloak. It only reads.