# Asset Hierarchy and Access Rules

CX Fabric organizes assets in a structured hierarchy, where integrations, flows, connectors, and credentials are interconnected. Understanding these relationships helps in managing assets effectively and ensuring proper access control when sharing.

### How Assets Relate to Each Other <a href="#how-assets-relate-to-each-other" id="how-assets-relate-to-each-other"></a>

**Integration → Flows → Connectors → Credentials**

1. **Integrations** act as containers for **Flows** that define automated processes.
2. **Flows** use **Connectors** to interact with external services and systems.
3. **Connectors** require **Credentials** to authenticate and establish secure connections.

This hierarchical structure ensures that when a flow runs, it can use the necessary connectors and credentials, maintaining seamless automation.

### How Sharing Impacts Accessibility <a href="#how-sharing-impacts-accessibility" id="how-sharing-impacts-accessibility"></a>

Sharing assets impacts which users can view and use related assets. Below are the access rules based on sharing settings:

#### Flow Access Rules <a href="#flow-access-rules" id="flow-access-rules"></a>

* When an Integration is shared, all Flows within it become accessible to the recipient.
* These shared Flows appear in the Flows List Page with a "Shared" status.
* A user with access to a shared Flow can view and edit it based on their assigned permissions.

#### Connector Access Rules <a href="#connector-access-rules" id="connector-access-rules"></a>

* If a Flow is shared, users can see the Connectors used within the shared Flow in the Flow Designer’s Connector Library.
* Users can access:&#x20;
  * Connectors already in the shared Flow
  * Connectors explicitly shared with them
  * Connectors they own

However, Connectors in a shared Flow do not automatically appear in the Connectors page unless explicitly shared as a separate asset.

#### Credential Access Rules <a href="#credential-access-rules" id="credential-access-rules"></a>

* If a Flow is shared, the credentials associated with it are pre-set in the Flow Designer. The Flow owner selects a default credential to be used when sharing the Flow.
* Users with access to the shared Flow can:
  * Use the pre-selected credential
  * Access their own credentials
  * Access credentials explicitly shared with them

Credentials do not appear in the Credentials page unless explicitly shared as a separate asset.

#### Key Takeaways <a href="#key-takeaways" id="key-takeaways"></a>

* **Sharing an integration** grants access to all flows within it.
* **Sharing a flow** does not automatically share its connectors and credentials.
* **Connectors and credentials must be shared separately** to be visible in their respective management pages.
* **Pre-configured credentials** remain in the flow for execution but are not accessible unless explicitly shared.