Users review and certification

This document provides information about the Users review and certification report screen, which displays information about user review and certification in Segura™.

The report shows the reviews of every user. By default, System Administrator, PAM Administrator, System Auditor, and PAM Auditor users can open it. The Access review and certification role does not open this report. Reviewers see the history of the users they review on the review screen. For details, see Review a user's access.

Path to access

On Segura™, in the navigation bar, hover over the Product Menu and select Reports.
On the side menu, select Review and certification > Users review and certification.

Actions menu

Item	Type	Description
Actions	Dropdown menu	Displays the Print Report, Export CSV, and Schedule Report options.

Search fields

Info

To display all search fields, click More.

Item	Type	Description
ID	Text field	Filters users by their identification code within Segura™.
Name	Text field	Filters users by their name within Segura™.
Username	Text field	Filters users by their username within Segura™.
Campaign	Text field	Filters users by the name of the campaign. When you open the report from a campaign, this field shows that campaign.
Reviewer	Text field	Filters users by the name of their reviewer within Segura™.
Last review	Date field	Filters users by the period in which they were last reviewed within Segura™.
Next Review	Date field	Filters users by the period for the next revision within Segura™.
Approver	Text field	Filters users by the name of the global approver who approves the review when the Enable approval workflow for users review and certification parameter is on.
Approval status	Dropdown menu	Filters users by their approval status. Options are Approved, Reviewed, Pending Review, Pending Approval, or Failed. Clear the field to enable the All option.

Report fields

ID
Name
Username
Reviewer
Campaign
Campaign scope: All active users, Specific users, or Specific user groups.
Last review
Next review
Status
Approver
Approval status
Actions
- Details: directs to the Review and Certificate screen.

Info

By default, the report displays 30 records per screen. To go to the next screen, click the forward buttons at the end of the report.

Review and certificate screen

If a user has already been reviewed, you can access the review details by clicking Details on the Actions button in the User Review and Certification report. The details are read-only. To return to the report with the filters and page you left, click Close.

General tab

User information section

Item	Type	Description
Name	Text field	Indicates the user's name.
Username	Text field	Indicate the user's username.
E-mail	Text field	Indicate the user's Email Address.
Telephone	Text field	Indicates the user's phone number.
Department	Text field	Indicates the user's department.
Ignore two factor authentication?	Text field	Indicates if the user will bypass multi-factor authentication.
User group	Text field	Indicates the user's user group.

Review and certification details section

Item	Type	Description
Reviewer	Text field	Indicates the name of the reviewer for that user record.
Review date	Text field	Indicates the date the revision was made. Displayed in format `DD/MM/YYYY HH:MM:SS`.
Status	Text field	Indicates the status of the user's registration.
Review justification	Text field	Displays the justification text as written by the reviewer.

Roles tab

Item	Type	Description
Role	Text field	User's role in Segura™.
Built-in	Text field	Indicates if the role is one of the default Segura™ roles.
Description	Text field	Description of the role

Access policy tab

The tab lists the access policies assigned directly to the user and the access policies the user inherits from user groups. A policy the user has both directly and through a user group appears in two rows.

Item	Type	Description
Access policies	Text field	Access policy's name.
User group	Text field	User group from which the user inherits the access policy. A "-" indicates a policy assigned directly to the user.
Module	Text field	Module to which the access policy applies.
Description	Text field	Description of the access policy.
Devices	Button	Opens the Devices modal, which displays all devices that are part of the access policy.
Credentials	Button	Displays the credentials that are part of the access policy.

Info

Inherited access policies show a lock instead of a checkbox. A reviewer cannot remove them in the review. When the tab lists inherited policies, a message at the end of the grid explains this.

Devices modal

Item	Type	Description
Search	Text field	Filters the devices according to the entered text.
Device name	Text field	Device name
Management	Text field	Device's hostname or IP address.
Type	Text field	Device type.
Vendor	Text field	Device's vendor.
Model	Text field	Device's model.

History screen

The History screen lists the completed reviews of a user across all campaigns. Each row is one completed review.

Path to access

On Segura™, in the navigation bar, hover over the Products menu and select Settings.
In the side menu, select Access control > Users review and certification > Users.
Click the Actions button of the user and select History.

History fields

Item	Type	Description
Code	Text field	Identification code of the review.
Campaign	Text field	Campaign in which the review took place.
Name	Text field	User's name.
Username	Text field	User's username.
Email	Text field	User's email address.
Reviewer	Text field	Name of the user who performed the review.
Last review	Text field	Date and time of the review.
Next review	Text field	Date of the next review.
Status	Text field	Status of the review.
Approver	Text field	Name of the user who approved or rejected the review.
Approval status	Text field	Approval status of the review.
Actions	Button	Details opens a read-only view of the review, with the General, Roles, Access policy, and Credentials tabs.