How to Complete Delegated Access Reviews

You can complete delegated access reviews items from access reviews that were assigned to a different certifier that the original approver delegated to you. For example, if an employee does work for you but reports to a different manager, that manager might not be familiar with all of the entitlements or roles listed in the employee's Identity Cube.

To display the Manage Work Item page, click a delegation work item.

Required Authorization

To take action on a delegated work item, you must be the owner of that work item.

Note: A System Administrator or Certification Administrator can also take action on work items.

  1. Open a delegated work item.

  2. Review the work item information in the Summary section.

  3. Review the Comments section for any information associated with this work item. Use the Add Comment button to add additional information to the work item.

  4. Make an access review decision on each item listed for the identity. See Making Access Decisions for detailed information.

  5. Click Complete to display the Completion Comments dialog and mark the work item as complete.

Note: If your deployment is configured to require a decision on each item in the work item before it is marked complete and you do not take action on all items in the work item, an alert displays when you attempt to complete a work item.

If the access review was originally configured to require a delegation review, you can perform this review after the delegate completes their portion of the access review. The items awaiting review are listed on the Important tab of the access review.

  1. In the access review, click the Important tab. Delegated items that have been completed and are awaiting review are listed in the Returned Items section.

  2. To view the comments of the delegated decision maker, click the three-line menu and choose History,

  3. Click Agree to accept the delegated decision; if you don't accept the delegated decision, you can override the delegated decision with any of the available options – Revoke, Revoke Account, Allow, etc. You can also delegate the line item again.

Note: If the identity who originally delegated the work item overrides a delegated decision, an audit shows the delegation of the work item was never assigned.