Connect your Fivetran account to Scrut to bring user access data into your compliance workflows and run automated security checks against your connected Fivetran environment.
What This Integration Does in Scrut
Automated Tests: Runs automated checks that continuously evaluate Fivetran for security misconfigurations and compliance checks against your applicable compliance frameworks.
User Access Data: Fetches user details, roles, and permissions from Fivetran for Access Reviews.
Prerequisites
An active Fivetran account with Account Administrator access
API credentials (API Key and API Secret) generated from your Fivetran dashboard or a System Key with USER - READ permission.
Permissions and Access Requirements
For Fivetran
Account Administrator role in your Fivetran account
For Scrut
Admin access to Scrut, or Contributor access with permissions to the Integration module.
Data Collected
User name: Full name of the Fivetran user
User email: Primary email associated with the account
User role: RBAC role assigned in Fivetran
Sync Frequency
Data is synced automatically once every 24 hours. You can also manually trigger a sync from the integration settings page.
Integration Setup
Step 1: Generate API Credentials in Fivetran
There are two ways to generate credentials. Use whichever matches your access and security requirements.
Option A: Generate a Personal API Key
Log in to your Fivetran dashboard.
Click your username in the bottom-left corner.
Click API Key.
Click Generate API key. If a key already exists, click Generate new API key.
Copy both the API Key and the API Secret immediately. Store them in a secure location.
Important: The API Secret is shown only once. If you close this screen without copying it, you must generate a new key.
Option B: Create a System Key (Recommended for org-managed access)
Log in to your Fivetran dashboard.
Navigate to Account Settings → General → System Keys.
Click +Add system key.
Enter a name for the key.
Assign the USER -- READ permission.
Copy the key credentials and store them securely. Learn more about Fivetran’s system keys here.
Step 2: Connect Fivetran in Scrut
Log in to Scrut and navigate to Integrations → Integrations Library.
Search for Fivetran or scroll to the Database category and click Integrate on the Fivetran tile.
Enter the API Key and API Secret in the corresponding fields.
Click Submit.
What Happens Next?
Initial data sync
After the connection is saved, Scrut begins the initial data sync automatically. You can monitor sync status and review any errors in the Audit Logs section of the integration settings page.
Review synced data
Navigate to People → Access Reviews to create an access review for Fivetran users and roles fetched by this integration.
Navigate to Tests → Automated Tests to view the compliance checks that Scrut performs for this integration.
Common Errors and Troubleshooting
Invalid credentials
Cause: The API Key or API Secret entered in Scrut does not match the active credentials in Fivetran.
Possible solutions: Return to your Fivetran dashboard and regenerate your API credentials. Re-enter the updated API Key and API Secret in the Fivetran integration settings in Scrut. If using a System Key, confirm the key has not been deactivated or modified in Account Settings.
Insufficient permissions
Cause: The credentials used do not have the USER -- READ scope assigned.
Possible solutions: If using a personal API key, confirm your Fivetran account carries the Account Administrator role. If using a System Key, navigate to Account Settings, then General, then System Keys, and verify the USER -- READ permission is assigned.
User Data Not Appearing in Access Reviews
Possible solutions: Confirm the integration status shows as Connected in Scrut's integration settings. Trigger a manual sync from the integration settings page and wait for the sync to complete. Check the Audit Logs for any sync errors or partial failures.
FAQs
1: What types of API keys does Fivetran support, and which should I use?
Fivetran supports two types: a personal API Key (tied to your user account and inheriting your RBAC permissions) and a System Key (org-managed with explicit scopes). Either works for this integration. Use a System Key if you want to limit the scope to USER -- READ and avoid tying credentials to an individual user account.
2: What happens if I regenerate my API credentials in Fivetran?
The existing connection in Scrut will stop working. Re-enter the new API Key and API Secret in the Fivetran integration settings in Scrut to restore the connection.
Reach out to support@scrut.io or contact your CSM for further assistance.