2023.11.20

Changes in Veza release v2023.11.20

Access Reviews

Enhancements

• EAC-29446 Decision columns: Certifications now have optional columns Decision At and Decision By for better visibility into row decisions, and enabling the option to filter on these values.

• EAC-28135 Improved column naming logic for intermediate entity types: When enabled, columns showing an Intermediate Entity are no longer always named Intermediate Role <property-key>.

  • Intermediate column titles now default to Intermediate Node <property>.

  • Local User name columns are titled Local User ID.

  • Role intermediate type columns are titled Intermediate Role.

Veza Integrations

Enhancements

• FR-1335 Active Directory: Added support for cross-domain user and group relationships involving sub-domains (before, this was only supported for external domains).

• EAC-29614 Box: Increased user extraction speeds and decreased extraction interval for improved efficiency and lower API costs.

• EAC-29679 Concur: To enable custom mapping for external identities, Concur Users now have an Identities attribute containing the local username.

• EAC-27117 Kubernetes: Added support for connecting to Microsoft Azure AKS managed Kubernetes service. Added built-in assessments Azure AD Users with AKS Managed Cluster write permissions and Azure AD Users with AKS Managed Cluster delete permissions.

• EAC-28767 Open Authorization API: Custom Role Assignments can now have developer-defined attributes specified in custom_property_definition.role_assignment_properties. Role Assignments now inherit any custom properties on assigned Roles.

• EAC-27458 Product name changes: Outbound integrations and Webhooks are now managed under Orchestration Actions (renamed from Collaborations).

• EAC-28492 Product usability: The Add Integration button is now hidden when choosing the integration to create (and clicking Next is the only option). After completing the form, you can now click Create Integration at the top right to save the configuration.

Bug Fixes

• EAC-29621 AWS S3: Fixed a regression resulting in missing Authorization Graph relationships for some Bucket Policy Statements and previously-connected Buckets.

• EAC-29456 OneLogin: Renamed One Login Group to OneLogin Group for consistency with other OneLogin entities.

• EAC-28596 Slack: Fixed a validation error that prevented saving a Slack integration.