---
title: "Review a user's access"
slug: "how-to-review-a-users-roles"
updated: 2026-11-06T18:24:15Z
published: 2026-11-06T18:24:15Z
canonical: "docs.senhasegura.io/how-to-review-a-users-roles"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Review a user's access

As a reviewer in a user review and certification campaign, you review the access of each user assigned to you and confirm or remove it. A user can have several reviewers, and the first reviewer to finish completes that user's review. For how reviewers are assigned, see [Reviewers and global approvers](/v4-2/docs/about-access-review-reviewers).

## Requirements

- The **Access review and certification** role. Without it, the review screen shows *You do not have permission to access this screen!*
- You are the direct reviewer or a group reviewer of the user.
- A user review campaign is active.

## Review a user

1. On Segura™, in the navigation bar, hover over the **Products menu** and select **Settings**.
2. In the side menu, select **Access control > Users review and certification > Users**. The **Users** report lists only the users you review, as their direct reviewer or as a group reviewer.
3. Find a user whose **Status** is `Review pending`.
  - If the **Status** is `Reviewed`, another reviewer already completed the review. The **Reviewed by** column shows who reviewed, and you cannot review that user again.
4. Click the **Actions** button and select **Review and Certificate**.

### Review and Certificate screen

1. In the **General** tab, no information can be changed.
2. In the **Roles** tab, you can only delete one or more roles that were assigned to the user.
3. In the **Access policies** tab, you can only delete one or more access policies assigned directly to the user.
  - Click **View devices** to view the devices that are part of an access policy.
  - Click **View credentials** to view the credentials that are part of an access policy.
  - The tab also lists the access policies the user inherits from user groups. The **User group** column shows the group the policy comes from. A "-" in this column marks a policy assigned directly to the user.
  - Inherited policies show a lock instead of a checkbox, and you cannot remove them on this screen. When the tab lists inherited policies, a message at the end of the grid explains this.
  - A policy the user has both directly and through a user group appears in two rows.
4. In the **Justification** tab, write the justification for your review in the **Justification** field.
5. In the **Review** tab, check the information about your review.
6. Click **Save**.

After you click **Save**, Segura™ returns to the list of users to review, with the filters you were using.

To go back to the list without saving, use your browser's back button. The list keeps your filters and page.

In a user's review history, click **Close** to return to the list of users to review with your filters, page, and sort. In the details of a history entry, **Close** returns to that user's history. The **Users** link in the breadcrumb opens the list without filters.

After the review is done, Segura™ sends an e-mail to the user informing that the review process has been completed. One review is enough to complete a user's review. If the **Enable approval workflow for users review and certification** parameter in **Settings > System Parameters > Global > Approval Flow** is on, your completed review goes into an approval flow, and the global approver of the User Management module approves it through **Approval Workflow > Review and certification > Users > My approvals**.

Saving the review revokes only the direct access policies you removed. The user does not need to log in again for the revocation to take effect. When the review requires approval, the removals apply only after the review is approved.

## When Segura™ refuses a review

- **Another reviewer completed the review first.** If another reviewer saves the same user's review while you have it open, Segura™ refuses your save. Segura™ shows the message *This user has already been reviewed by* followed by the reviewer's name, and the user's row changes to `Reviewed`.
- **You are not a reviewer of the user.** Segura™ shows the message *The current user is not a reviewer of this user.* and refuses to open or save the review.
- **The campaign ended.** Segura™ shows the message *The campaign is not active.* and refuses to save the review.

## Verify your results

In the **Users** report, the user's **Status** is `Reviewed` and the **Reviewed by** column shows your name. The user's other reviewers see the same status and name. Segura™ does not notify them.

## Related topics

- [Reviewers and global approvers](/v4-2/docs/about-access-review-reviewers).
- [Users](/v4-2/docs/settings-review-and-certification-users), the review screen reference.
- [About review and certification](/v4-2/docs/settings-about-review-and-certification-of-access-and-user-policies).
- [Access review campaign problems](/v4-2/docs/troubleshooting-access-review-campaigns).