Sonrai Access
Connect Sonrai Access to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your Sonrai Access connection as user access review evidence. Automated collection is not available for this provider yet.
| Category | User Access Review |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In Sonrai Access:
- Sign in to Sonrai as a user whose role has the least access you need; tokens inherit their creator's privileges.
- Create a token from the UI under Advanced Search, or run the GenerateSonraiUserToken GraphQL mutation with a name and an expiresIn value in seconds (2 hours to 30 days).
- Copy the token immediately; Sonrai returns it only at creation.
Where to find the other values:
- Base URL (optional): The GraphQL endpoint is https://<yourOrgID>.sonraisecurity.com/graphql.
- Account / Org / Workspace (optional): Your Sonrai org ID, the value sent in the sonraisecurity-com-org header and used in the GraphQL endpoint host.
Sonrai Access shows the secret only once, so copy it before you leave the page.
Sonrai Access's public documentation does not cover every step.
The public docs say tokens can be created in the UI from Advanced Search but give no further click path or button labels. Tokens expire after at most 30 days and are then deleted automatically, so the recorded credential needs periodic renewal. Token creation and deletion are written to Sonrai's audit log. Where the org ID is shown in the UI was not documented on the fetched page. The main docs site (docs.sonraisecurity.com) otherwise redirects to a Sonrai sign-in.
Source: docs.sonraisecurity.com, checked 2026-10-07.
-
On Compliance › Connectors, open Sonrai Access, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
No automated compliance test reads Sonrai Access yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.
Related
- User Access Review connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks