Review a user's access

As a reviewer in a user review and certification campaign, you review the access of each user assigned to you and confirm or remove it. A user can have several reviewers, and the first reviewer to finish completes that user's review. For how reviewers are assigned, see Reviewers and global approvers.

Requirements

The Access review and certification role. Without it, the review screen shows You do not have permission to access this screen!
You are the direct reviewer or a group reviewer of the user.
A user review campaign is active.

Review a user

On Segura™, in the navigation bar, hover over the Products menu and select Settings.
In the side menu, select Access control > Users review and certification > Users. The Users report lists only the users you review, as their direct reviewer or as a group reviewer.
Find a user whose Status is Review pending.
- If the Status is Reviewed, another reviewer already completed the review. The Reviewed by column shows who reviewed, and you cannot review that user again.
Click the Actions button and select Review and Certificate.

Review and Certificate screen

In the General tab, no information can be changed.
In the Roles tab, you can only delete one or more roles that were assigned to the user.
In the Access policies tab, you can only delete one or more access policies assigned directly to the user.
- Click View devices to view the devices that are part of an access policy.
- Click View credentials to view the credentials that are part of an access policy.
- The tab also lists the access policies the user inherits from user groups. The User group column shows the group the policy comes from. A "-" in this column marks a policy assigned directly to the user.
- Inherited policies show a lock instead of a checkbox, and you cannot remove them on this screen. When the tab lists inherited policies, a message at the end of the grid explains this.
- A policy the user has both directly and through a user group appears in two rows.
In the Justification tab, write the justification for your review in the Justification field.
In the Review tab, check the information about your review.
Click Save.

After you click Save, Segura™ returns to the list of users to review, with the filters you were using.

To go back to the list without saving, use your browser's back button. The list keeps your filters and page.

In a user's review history, click Close to return to the list of users to review with your filters, page, and sort. In the details of a history entry, Close returns to that user's history. The Users link in the breadcrumb opens the list without filters.

After the review is done, Segura™ sends an e-mail to the user informing that the review process has been completed. One review is enough to complete a user's review. If the Enable approval workflow for users review and certification parameter in Settings > System Parameters > Global > Approval Flow is on, your completed review goes into an approval flow, and the global approver of the User Management module approves it through Approval Workflow > Review and certification > Users > My approvals.

Saving the review revokes only the direct access policies you removed. The user does not need to log in again for the revocation to take effect. When the review requires approval, the removals apply only after the review is approved.

When Segura™ refuses a review

Another reviewer completed the review first. If another reviewer saves the same user's review while you have it open, Segura™ refuses your save. Segura™ shows the message This user has already been reviewed by followed by the reviewer's name, and the user's row changes to Reviewed.
You are not a reviewer of the user. Segura™ shows the message The current user is not a reviewer of this user. and refuses to open or save the review.
The campaign ended. Segura™ shows the message The campaign is not active. and refuses to save the review.

Verify your results