Access Reviews
What is an Access Review?
Access Reviews are routine assessments to ensure employees have the appropriate access to applications based on their job requirements. Typically conducted by line managers or business owners, these reviews aim to:
- Confirm or adjust existing access roles/permissions.
- Downgrade permissions if needed.
- Revoke access if no longer required.
Access Reviews enhance security and compliance, ensuring access aligns with organizational policies.
Setting Up an Access Review Campaign
- Navigate to Access Reviews.
- Create a new Access Review, selecting the applications in scope.
- Assign reviewers:
- Managers for direct reports.
- Business Owners for users within specific applications.
You can run multiple campaigns simultaneously. To start a campaign, click the play icon. Review campaign results by selecting the campaign title. Once completed, download results as a CSV under the “Historic Access Review Campaigns” tab.
Performing an Access Review
As a manager, you’ll review access for your direct reports. You’ll receive a Slack notification with estimated review time.
As a manager, you’ll review access for your direct reports. You’ll receive a Slack notification with estimated review time.
As a business owner, you’ll review access for users in your assigned applications. A Slack notification will prompt your action.
- Click the provided link in your notification.
- For each user, decide:
- Should they retain access to the application?
- Is their current permission level appropriate, or can it be reduced?
- Submit the review for each application by clicking Submit.
Access changes are automatically applied.
FAQ
Was this page helpful?