# Analyze

> **Early Access**: Veza Analyze queries are currently available as an optional feature. Contact the Veza support team to learn more and to enable for your Veza tenant.

You can investigate users, groups, and role assignments from the *Access Intelligence* > *Analyze* page. This feature offers a simple interface to review a variety of authorization relationships for an individual entity.

For comparing access permissions between entities, see the [Compare](/4yItIzMvkpAvMVFAamTf/features/insights/compare.md) feature. For identifying toxic access combinations and Separation of Duties violations, see the dedicated [Separation of Duties (SoD)](/4yItIzMvkpAvMVFAamTf/features/separation-of-duties.md) feature.

For example, *Analyze* page offers a way to:

* show all users that can assume a Snowflake role.
* find all users or other groups that belong to an Active Directory group.
* find all groups or roles that an AWS IAM user can assume or is assigned.

After running an analyze, you can review the results immediately or open the search in Query Builder to add parameters and assign rules and risk levels.

### Analyzing a user, group, or role

1. Click *User Analyze*, *Group Analyze*, or *Role Analyze*.
2. Use the *Type* dropdown to choose the user, group, or role by provider (such as "Salesforce User").
3. *Select* an individual entity from the second dropdown.
4. Pick the *Analyze* query to run on the chosen entity.

If results are available, they will appear in the table of *records*.

* Click *Columns* to show or hide any group, role, or user properties
* Click *Open in Query Builder* to open a search in Query Builder, with an attribute filter on the entity name.

### Analyze queries

The possible analyze options depend on whether you have chosen a user, group, role, and the entity's provider integration. The following actions are available based on the specified entity category:

* User
  * All Groups the User is in
  * All Roles the User can assume
* Group
  * All Users that are in the Group
  * All Roles the Group can assume
* Role
  * All Users that can assume the Role
  * All Roles that can assume the Role


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.veza.com/4yItIzMvkpAvMVFAamTf/features/insights/analyze.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.