Zendesk
Inventory Zendesk admins and agents with their roles, two-factor status and last sign-in, the apps installed in Zendesk, the OAuth apps and API tokens that can reach your ticket data, the webhooks that send it to outside systems, and the Enterprise audit log.
Questions you can answer 16
Each one is a saved query that ships with ConfigView, reading your Zendesk data on your own server. Ask it in plain English, SQL, Slack or the API.
- Which Zendesk agents do not have two-factor authentication?
- Do all our Zendesk admins use 2FA?
- What apps are installed in Zendesk?
- Which Zendesk apps were installed in the last 30 days?
- Which Zendesk Marketplace apps can every agent see?
- Who exported data from Zendesk this month?
- What admin changes were made in Zendesk in the last 30 days?
- Who was made a Zendesk admin recently?
- Which OAuth apps have access to Zendesk?
- Which Zendesk API integrations have not been used in months?
- What third-party apps have our agents authorized in Zendesk?
- Which Zendesk agents have not logged in for 90 days?
- Who has a Zendesk agent seat but never signs in?
- Are there inactive Zendesk admins?
- Where do Zendesk webhooks send our ticket data?
- Which Zendesk webhooks have no authentication?
No Zendesk questions match that yet. Try a shorter word.
What ConfigView collects from Zendesk 9
-
API Tokens
API tokens on the account: description, active or not, who created it, and when it was created and last used. Token values are never read.
-
Installed Apps
Apps installed in Zendesk from the Marketplace or built privately: app name and author, whether it is enabled, paid, and limited to certain roles or groups. App settings are never read - they can hold API keys.
-
Audit Log
Zendesk's audit log (Enterprise plans): who signed in, exported data, or changed users, roles, settings, apps and rules, from which IP address, and what changed. Kept as a growing history.
-
Custom Agent Roles
Custom agent roles (Enterprise plans): name, what kind of role it is, how many agents hold it, and the permissions it grants.
-
OAuth Clients
OAuth clients registered on this Zendesk account - the integrations allowed to ask users for API access: name, company, which admin created it, allowed scopes and the hosts it redirects to. The client secret is never read.
-
Authorized Marketplace OAuth Apps
Third-party OAuth apps (global clients) that people on this account have authorized, with how many live tokens they hold and when one was last used.
-
OAuth Tokens
Every OAuth access token on the account: which client and which user it belongs to, its scopes, when it was created, last used and when it expires. Token values are never read.
-
Admins and Agents
Every Zendesk admin and agent (never the customers who open tickets): role, custom role, whether two-factor sign-in is on, suspended or deleted, and when they last signed in.
-
Webhooks
Webhooks that send Zendesk ticket and user events to outside systems: the destination host, which events, active or not, how they authenticate (type only), and who created them.