Overview

Torii integrates with Drata and syncs:

• Users and their status in Drata
• Each user's Drata role
• License usage

You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.

Requirements

Accounts & Permissions

To connect this integration, we require the following:

• A Drata account with access to Settings >> API Keys (creating API keys is an administrator-level action in Drata).
• An API key with read access to both of the following:
  • List Users — the people who have a Drata login.
  • Get Company Settings — Torii reads your company name to label the connected account.

The simplest way to satisfy both is to choose All read access when you create the key. If you prefer to grant only what is needed, choose Custom and enable those two permissions.

Required keys

• API Key — the Drata API key you generate below.
• Drata Region — the region your Drata organization is hosted in.

How to Generate the Required Values

Follow these steps to generate the required values:

Step 1: Create a Drata API key

1. In Drata, select your account at the bottom of the left-hand navigation, then select Settings.
2. On the Settings page, select API Keys.
3. Select the Create API Key button.
4. Enter the key details:
   • Name — a name you will recognise, for example Torii. The name cannot be changed once the key is active.
   • Expiration date — choose 12 months, Never, or Custom. The default is 12 months. If you set an expiration date, the key stops working on that date and the integration will need to be reconnected with a new key.
   • Allowed IP Addresses — leave this empty. If you restrict the key to specific addresses, Torii's requests will be blocked.
5. Under Access, choose the scope of the key:
   • All read — enables all current and future read permissions. This covers everything Torii needs.
   • Custom — select individual permissions. Enable List Users and Get Company Settings.
6. Save the key, then acknowledge the prompt confirming you have stored it securely.
7. Select Done. Your API key is now active.

Step 2: Identify your Drata region

Drata hosts organizations in three regions, and Torii must send requests to the matching one. Choose the option in Torii that matches your region:

If you are not sure which region your Drata organization is in, check with your Drata administrator or Drata support before connecting. A key is only valid on its own region's endpoint, so selecting the wrong region is likely to look like an invalid key rather than a region problem — check the region before assuming the key is wrong.

How to Connect the Integration

1. Go to the Integrations page in Torii.
2. Search for Drata and click Connect.
3. Paste your Drata API Key.
4. Select your Drata Region.
5. Click Connect.

Q&A

Q: I entered my API key and got an error saying the key is invalid. What should I check?

A: Check the region first. An API key from one Drata region is not valid on another region's endpoint, and that will most likely surface as the same invalid-key error rather than as anything mentioning the region. Confirm your region with your Drata administrator, then confirm in Drata under Settings >> API Keys that the key's status is Active rather than Expired or Revoked, and that no IP restriction is set on it.

Q: Why do the roles I see in Torii look like codes rather than job titles?

A: Drata returns role identifiers such as ADMIN, EMPLOYEE or TECHGOV through its API rather than the friendly labels shown in the Drata interface, and Torii displays exactly what Drata returns. A user with more than one Drata role is shown with the roles combined into a single value.

For any further questions, please contact Torii Support.