A security role assigned to both people and integrations

Security role assigned to both human users and integrations.

One role held by both people and service accounts means every privilege you add hits both audiences at once, and a stolen integration key inherits full human access.

List every application user (a systemuser row with applicationid set) alongside its roles, then group the result by role instead of by user. Any role whose holders include both a row with applicationid set and a row without it is shared. There is no built-in screen for this, which is most of why it survives.

Split the role in two: humans on one copy, integrations on the other.

These mappings are indicative. Pathix detects a condition relevant to a control. It does not certify your compliance, and a finding is not an audit opinion. You stay responsible for your control environment.

• An integration account holding System Administrator
• An integration account that can grant itself privileges
• A non-admin role that can grant itself administrator
• A role-holding team with both people and service accounts in it