Review access

Before you start

Confirm the tenant, people or groups, resource types, and review period. Name the person who will decide whether each item is still needed.

A review covers the assignments selected by its criteria. It does not prove that unrelated access is correct.

Create the review

1. Open People and access.
2. Choose Access reviews.
3. Create a review.
4. Choose clear criteria that match the approved scope.
5. Check the number of matching direct assignments.
6. Set the reviewer and due date.
7. Start the review.

Decide each item

• Keep means the current assignment is still correct.
• Change means the person still needs access but the item, actions, or dates need correction.
• Remove means the assignment is no longer needed.

Read the resource, actions, effect, dates, and evidence before deciding.

Complete the review

1. Resolve every pending item.
2. Check changed actions and dates.
3. Refresh if another reviewer changed the review.
4. Complete the review.
5. Confirm that the review reached its final state.

Completion is one operation. Pūnaha does not apply only part of a completed review.

Check the result

1. Use Check access for an action that should remain allowed.
2. Check an action that should now be unavailable.
3. Check the permission ledger and audit record.
4. Keep the approved review evidence under your organisation's rules.

If the review cannot finish

Look for a pending item, a change made by another reviewer, an invalid proposed action, or missing review management access. Read Fix sign in, invitation, and access problems.

Next step

Set the next review date according to your organisation's policy. Do not assume that completing one review makes all future access correct.