Skip to main content
owlie
Sign Up Free

Object Model

Who this is for​

Admins, auditors, and developers who need exact object definitions.

Goal​

Describe the core objects and how they relate.

Prereqs​

  • /fundamentals/glossary

Success criteria​

You can identify the correct object for any Owlie workflow.

Core objects​

  • Tenant: The top‑level boundary for data and access.
  • Identity: A person or service account in Owlie.
  • Account: An external system profile linked to an identity.
  • Group: A collection of identities used for approvals or roles.
  • Resource: A requestable access item.
  • Entitlement: A permission in an external system.
  • Request: A workflow requesting one or more resources.
  • Ticket: An approval or fulfillment work item.
  • Assigned resource: The link between an identity and a resource.
  • API key: A token used for API authentication.

Relationships​

  • A tenant contains identities, resources, and requests.
  • An identity can have many accounts.
  • A request can produce many tickets.
  • A ticket records a decision and links to evidence.

Example​

An identity requests a resource, creating a request and tickets. Fulfillment creates an assigned resource record.

Troubleshooting​

  • If an object is missing from this list, check /api/graphql-schema for the latest schema.

Next steps​

  • /reference/roles-permissions
  • /reference/errors