Basic Access Review Procedure

Access Reviews are performed from the Access Review Page Overview page.

1. Go to your My Access Review page.

2. Perform one of the following actions on each item included in the Access Review Request:

   Note: Not all of the decision options are available at all times.

   • Reassign – see Reassign Access Reviews

   • Approve – Approve Access Reviews

   • Delegate – Delegate Access Reviews

   • Allow Exception – Allow Exceptions on Access Reviews

   • Revoke or Edit Access – Revoke or Edit Access From Access Reviews

   • Revoke Account – Revoke an Account on Access Reviews

   • Allow Violation – Allow Policy Violations on Access Reviews

3. Save your changes. Any decision made on the Access Review Details page or the Decisions tab must be saved before to moving to a different page. A warning prompts for any unsaved changes.

   Decisions are not committed at this point, however, and can still be changed before the access review is signed off on.

   Note: Changing the decisions might revoke one or more line item delegations. Any changes made during the delegation will be lost.

4. Sign off a periodic certification task before it is overdue.

   Note: All items must be in the complete state before the sign off option is available.

   You must sign off a periodic certification before it is considered complete. Click Sign Off on the Access Review Details page and select Finish on the Sign Off Access Review screen.

   If the challenge period for revocations is active, you cannot sign off an access review until one of the following conditions is met:

   • All items are complete and the challenge period is not active or no revocation decisions were made.

   • The access review is in the challenge phase and all items are completed and any revocation decisions have progressed through the challenge procedure.

   • The challenge period has expired.

5. OPTIONAL: If an electronic signature is required, you must authenticate in order to complete the electronic signature. Electronic signature requirements are configured when the certification is scheduled. Use the same credentials for the electronic signature that you use to sign in to IdentityIQ.