Security & recovery · Practical guide

Build a website access inventory

Find who can change the website and its surrounding services, then connect that access to a current business responsibility.

2 min read4 practical steps

An original planning guide. Use the linked primary documentation for platform details and the supported procedure for your environment.

List service boundaries

Include hosting, registrar, DNS, CMS, email, analytics, source control, payment integrations, and backup storage where they apply.

Identify access holders

Record named people, service accounts, roles, and the accountable owner. Keep credentials in an appropriate system rather than this inventory.

Review unnecessary reach

Compare privileges with actual tasks. Flag shared logins, former contributors, and integrations without a known purpose for controlled review.

Verify recovery ownership

Confirm that appropriate owners can recover access and approve changes. Record a supported escalation route for each critical service.

Worked scenario

See the plan in practice.

A former designer no longer edits pages but still controls the registrar recovery address. The inventory makes that dependency visible.

Review your result

Your acceptance checklist

  • Services listed
  • Access justified
  • Recovery owned

Use these checks to identify gaps in your access inventory. Assign an owner to any unresolved item before the next dependent step.

Primary references

For the underlying concepts and current platform details:

Continue your project

More security & recovery guides.

All security & recovery guides

Frequently asked questions

What you need to know.

Talk to our team

What will I produce when I build a website access inventory?

The intended deliverable is an access inventory.

Find who can change the website and its surrounding services, then connect that access to a current business responsibility.

What belongs in a website access inventory?

List service boundaries. Include hosting, registrar, DNS, CMS, email, analytics, source control, payment integrations, and backup storage where they apply.

Identify access holders. Record named people, service accounts, roles, and the accountable owner. Keep credentials in an appropriate system rather than this inventory.

How can I review the completed access inventory?

Check your access inventory against these acceptance points:

  • Services listed
  • Access justified
  • Recovery owned

Confirm that appropriate owners can recover access and approve changes. Record a supported escalation route for each critical service.

Let.com

Coming soon.

Account sign-up, log-in and checkout are not available yet. You can explore our products and compare plans while we get everything ready.

Compare plans