Platform Connections
This guide walks you through connecting, configuring, and managing marketing platforms in AccessHive. A platform connection links AccessHive to an external service – like Google Ads or Meta – so your team can manage access and credentials from one place.
Time to complete: About 5 minutes per platform.
- You need the Admin role.
- Have your platform admin credentials ready for the authorization flow.
- Your agency profile must be configured. See Agency Onboarding.
Which platforms are available?
The platform catalog organizes available connections by domain:
| Domain | Example platforms |
|---|---|
| Paid Media | Google Ads, Meta Ads, Programmatic |
| Analytics | Google Analytics 4, data and analytics tools |
| SEO | Google Search Console, SEO tools |
| CRM | Salesforce, HubSpot, marketing automation |
| Ecommerce | Shopify, Magento, BigCommerce |
Each catalog entry shows the platform’s capabilities, supported identity types, required connection method (OAuth, API key, or credentials), and audit features.
For more about how platforms work in AccessHive, see the Platforms concept page.
Connecting a platform
Step 1 – Browse the catalog
Navigate to Platforms > Catalog. Search or filter by domain to find the platform you need.
Step 2 – Add the platform
Click Add on the platform card. This creates a platform entry for your agency.
Step 3 – Enter connection credentials
Depending on the platform, you provide an OAuth authorization, an API key, or a service account. The platform card tells you which method is required.
Step 4 – Complete the authorization flow
For OAuth platforms, you are redirected to the platform’s consent screen. Sign in with your admin account and grant the requested permissions.
Step 5 – Verify the connection
The system runs a connection test automatically. A Connected status confirms everything is working.
Step 6 – Configure access items
Define what roles and permissions are available for this platform. These become the building blocks of access requests – the items that clients and team members request when they need platform access.
See the Access items section below for details.
Run the validation check on the platform detail page after connecting. This catches missing configuration before your team starts using the platform.
Navigating the platform detail page
Each connected platform has a detail page with these sections:
| Section | What it shows |
|---|---|
| Readiness Overview | Visual progress indicator showing how close the platform is to fully operational – tracks connection, configuration, and access item setup |
| Connection Card | Authentication status, token health, and options to reconnect or rotate credentials |
| Configuration | Admin settings, deployment targets, and organizational unit mapping |
| Access Items | Roles and permission groups available for this platform |
| Asset Discovery | Automatically discovered resources like accounts, properties, and organizational structures |
| Validation | Connection and configuration tests with pass/fail results |
Platform readiness states
| State | What it means |
|---|---|
| Operational (green) | Fully connected, access items configured, ready for client assignments |
| Not Connected (yellow) | Platform added but authorization or credentials not yet configured |
| Action Required (red) | Connection error, expired token, or missing configuration |
| Disabled (gray) | Manually disabled by an admin |
A platform must reach Operational state before you can create access items or assign it to a client. Complete the connection and configuration steps to move a platform from Not Connected to Operational.
Access items
Access items define what permissions and roles are available on a platform. They are the building blocks of access requests.
Types of access items
| Type | Description | Example |
|---|---|---|
| Predefined Role | A standard platform role | “GA4 Viewer”, “Meta Ad Account Admin” |
| Custom Group | An agency-defined bundle of multiple permissions | “Campaign Manager Bundle” with read, edit, and report access |
| Service Account Access | Machine-to-machine access for automated workflows | Automated reporting pipeline |
| API Scope | Specific permissions for programmatic integrations | Read-only analytics scope |
Creating access items
Step 1 – Open the access items tab
Go to the platform detail page and select the Access Items tab.
Step 2 – Create a new item
Click New Access Item. Choose the type and configure the specific permissions it grants.
Step 3 – Set approval requirements
Define the approval workflow and risk level for this item. The risk level determines how much oversight is needed:
- Low risk – Can be auto-approved for faster access.
- Medium risk – Requires one approver.
- High risk – May require multiple approvers.
Step 4 – Publish
The item becomes available for client access requests once published.
Assign higher risk levels to items that grant broad permissions (like admin roles). This ensures the right people review sensitive access requests.
Something went wrong?
Platform connection shows Action Required
The most common cause is an expired OAuth token. Go to the platform detail page, open the Connection Card, and click Reconnect. Complete the authorization flow again. See Troubleshooting.
Platform is stuck at Not Connected
The authorization flow may not have completed successfully. Try disconnecting the platform and connecting again from the catalog. Make sure you are using an admin account with the required permissions. See Troubleshooting.
Access items are not appearing for clients
Access items must be published before they show up in client access requests. Go to the Access Items tab on the platform detail page and verify each item’s status. Also confirm the platform is in Operational state. See Troubleshooting.
Asset discovery did not find any resources
Discovery runs automatically on connection but may take a few minutes. You can trigger a manual discovery from the Asset Discovery section on the platform detail page. If resources still do not appear, verify that the connected account has permission to list them. See Troubleshooting.
What’s next?
- Create identities – Set up credentials for your team to access the platform. See Creating Identities.
- Assign platforms to clients – Link connected platforms to specific client accounts. See Client Management.
- Configure access requests – Set up approval workflows for platform access. See Access Requests.
- Connect Google Workspace – Enable identity provisioning with managed domain accounts. See Google Workspace Setup.