An access review asks the people who know a place whether everyone who can open it still needs to. An Organisation Admin or an Access Manager starts it under Reviews; it is answered by the people named to answer it.
Also called: recertification, access recertification, entitlement review.
Kind | What is reviewed | Who answers |
|---|---|---|
Who can open spaces | Every person with every key or card that opens one of the chosen spaces, one row per person, space and key. | For each space, the reviewer named on it, and the nearest responsible person with their deputies. Any of them can answer. |
Privileged users | Every login with the Organisation Admin, Access Manager, Credential Manager or Security Monitor role, and the members of every people group marked as a privileged account list. | The reviewers named at the start. They answer every row. |
Only someone with an active login linked to their person record can answer. A row nobody can answer waits until someone is named.
Keep: the access stays.
Remove: portierX takes the access away when the answer is submitted.
Clarify: with a note saying what needs clarifying. The row shows in the follow-up.
A row whose access comes only through a group takes no answer; that access is changed on the group's page. Remove is not offered when no assignment stands behind the key, or when the assignment also covers spaces outside the review.
What the person holds | What happens on submit |
|---|---|
An electronic card or digital key | The access is taken off and the change is sent to the locking system. |
A mechanical key that concerns only this space | The key is listed under Returns, with this review as the reason. |
A mechanical key that also opens doors the person keeps | The key is to be returned and reissued; it is listed under Returns as well. |
A reserved copy waiting for its hand-over | The reservation is released. |
A role in portierX | The role is removed. The person's permissions change at their next request. |
An entry in a privileged account list | The person is taken off the list. Follow it up in the other system. |
When a removal is not carried out, the row says why. The person who answered, or an Organisation Admin or Access Manager, can try again.
Every review has a due date. Before that date and on the day after it, portierX emails everyone who still owes answers (Answer an access review). Under Reviews, a notice names each overdue review and who has not submitted.
A review closes on its own when the last person who can answer has submitted. An Organisation Admin or an Access Manager can also close it earlier. Rows with no submitted answer then count as missing.
The rows are stored as they stand at the start. Nobody can change them afterwards.
The first saved answer holds the row. The person who gave it can change it until they submit.
Nothing is removed before someone submits. Not answering changes nothing.
Answers saved and not submitted stay stored after closing and act on nothing.
A review keeps its rows and every answer, closed or open.
Running a periodic access review
