It is time to recheck who can open which spaces, or who holds special rights in portierX. An Organisation Admin or Access Manager starts and closes the review, the reviewers it names answer it, and the key desk takes back what was removed. It starts under Reviews.
Each step names who acts.
Before the first run, an Organisation Admin settles who answers for each space.
An Organisation Admin names the reviewer on each space the review is to cover (Name approvers, owners and reviewers).
Each run is a review of its own, with a name and a due date.
An Organisation Admin or Access Manager chooses Start Review under Reviews, then the kind, the spaces or the reviewers, and the due date (Start and close an access review).
Everyone who can answer receives an email with the link, answers their rows Keep, Remove or Clarify, and submits (Answer an access review).
A row whose access comes only through a people group takes no answer. If the access should go, a Credential Manager, Access Manager or Organisation Admin takes the person out of the group on the group's page (Organise people into groups).
When everyone has submitted, the review closes on its own. Otherwise an Organisation Admin or Access Manager closes it with Close review (Start and close an access review).
What stays open after submitting shows in the Follow-up column.
For every Remove, portierX takes the access away on submit, and mechanical keys go on Returns (Access reviews: what they are and how they run).
When a Remove takes someone off a privileged account list, portierX also takes back what that people group gave them, as when anyone leaves a group (Organise people into groups).
A Credential Manager, Access Manager or Organisation Admin opens the person from the Returns tab with Mark returned and takes the keys back there (Work through hand-overs and returns).
If a key taken back also opened doors the person keeps, a Credential Manager, Access Manager or Organisation Admin then assigns them a key for those doors (Give a person access).
If a Clarify row shows that access should go, a Credential Manager, Access Manager or Organisation Admin takes it away for that space (Take access away without taking everything back).
The person who answered, or an Organisation Admin or Access Manager, retries a removal that was not carried out with Retry (Answer an access review).
For an audit, an Organisation Admin or Access Manager shows the closed review on the Closed tab as the record that access was checked (What portierX can prove in an audit).
The review sits on the Closed tab.
Nothing is left open in the Follow-up column.
Returns lists no key this review removed.
Nobody whose group access was to go still shows on that group's People tab.
Every Clarify row is settled, and access that was to go is gone.
Every space in the review has a reviewer, or a responsible person with a login, for the next run.
