Skip to content

Products

Compliance Officer Service Expert-led compliance, end to end Compliance Portal Share security documents securely Document Management Draft, approve, and sign your policies Employee Portal Your whole team’s compliance, in one portal Access Review Monitor user access across all your systems AI Agents Run compliance from the tools you use Cookie Banner Consent that follows every visitor's law Device Agent Continuous security posture for every device Open-source platform Deploy Probo on your own infrastructure

Resources

Probo stories How teams get compliant with Probo Blog Ideas and guidance from the Probo team Guides & tools Practical compliance guides and free tools Love from Customers What customers say about working with Probo Changelog Latest product updates Download Get the Device Agent

Company

About The people and vision powering Probo Careers Join the team building Probo Brand assets Official logos and visual resources Security Review our security and compliance posture
Overview Understand Probo and its core concepts Product Explore Probo's GRC capabilities Developers Explore GraphQL, CLI, MCP, n8n, and webhooks Deployment Probo Cloud, self-hosting, and configuration

Explore

GitHub Explore our open-source compliance tools

Try searching for

Tab to move through results · Enter to open · Esc to close

Front

Connect Front as an access review source using OAuth or an API token so Probo can list your Front company's teammates and their admin status.

View as Markdown

Probo reads your Front company’s teammates through the Front Core API so you can review who has access. Connecting with OAuth is the recommended method and avoids creating and copying a token. A company API token is also available if you would rather not authorize an OAuth connection.

  • Probo organization administrator access
  • Front company administrator access, which is what Front requires to authorize an OAuth app or create an API token
Probo fieldFront fieldNotes
Namefirst_name, last_nameJoined into one display name. Falls back to username when both are empty, as on a pending invitation
Emailemail
Roleis_adminDisplayed as Admin or Teammate
Adminis_adminFlagged as administrator when is_admin is true
Statusis_blockedFront leaves blocked teammates out of the list, so every listed teammate is reported as active
MFANot supported
Last loginNot supported
External IDidThe teammate’s Front ID; stable identifier used to track the account across reviews
Created atNot supported

Front lists a teammate as soon as they are invited, before they accept. A pending invitation therefore appears in your campaign as an active teammate, named after its Front username.

If Front lists an automation as a teammate (a type of rule, macro, integration, application, api, ai, csat, smart_csat, or bulk_reply rather than user), Probo reports it as a service account.

Section titled “Option A: Connect with Front (recommended)”
  1. In Probo, go to Settings > Connectors and click Add more to open the Marketplace.
  2. Find Front and open it. If Probo asks how to connect, choose OAuth.
  3. Enter a Name for the connection (e.g. main) and click Connect.
  4. Sign in to Front as a company administrator and click Authorize.
  5. Go to Access Review > Sources, click Add sources, tick Front, and click Add.

Front API token resource permissions with Read ticked on the Teammates row

  1. In Front, open Settings, switch to the Company settings, go to Developers, and open the API tokens tab.
  2. Click Create API token and, under Token details, name it (e.g. Probo Access Review).
  3. Under Feature access, tick Access resources.
  4. Under Namespace access, tick Global resources.
  5. Under Resource permissions, tick Read on the Teammates row. Leave every other permission unticked.
  6. Click Create, then copy the token from the Copy your API token dialog. Front shows the token only once.
  7. In Probo, go to Settings > Connectors and click Add more to open the Marketplace.
  8. Find Front and open it. If Probo asks how to connect, choose API key.
  9. Enter a Name for the connection (e.g. main), paste the token into API key, and click Connect.
  10. Go to Access Review > Sources, click Add sources, tick Front, and click Add.

Probo names the source after your Front company and pulls its teammates into your campaigns.

  • An API token connection shows Disconnected. Front rejected the token: it was deleted or copied incompletely. Front does not show an existing token again, so create a new one.
  • An API token connection shows Not authorized. Front accepted the token but refused the teammates endpoint, because the token has no Read permission on Teammates. Create a token with the Global resources namespace and Teammates set to Read.
  • Replacing an API token. Delete the source in Access Review > Sources, disconnect the connector in Settings > Connectors, and connect again with the new token.
  • An OAuth connection asks to reconnect. Front OAuth authorizations expire after six months unless renewed, and an administrator can revoke one earlier. Click Reconnect on the connector in Settings > Connectors and authorize again.
  • A teammate who never joined appears. Front lists invited teammates before they accept. Withdraw the invitation in Front if the person should not have access; the next campaign picks up the change, and a campaign already under review keeps the entries it snapshotted.
  • A blocked teammate is missing. Front omits blocked teammates from its teammate list, and a blocked teammate cannot sign in.