# User Access Review

Verifies that a user access review was performed completely and appropriately by the reviewer.&#x20;

<figure><img src="https://1817223046-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F5mI0ilekQtcGTXKGQ2EF%2Fuploads%2FV8UCmFUbOLP9S7WVbxaC%2FUser%20Access%20review.png?alt=media&#x26;token=68d34819-87e9-4fae-b797-bd7f8775f7a3" alt=""><figcaption></figcaption></figure>

### Input Requirements

* A user permissions file sourced from your Access Management Platform (Microsoft AD, Okta, etc.).&#x20;
* A completed access review file sourced from your IGA or GRC systems (ServiceNow, SailPoint, etc.).
* A post access review file sourced from your IGA or GRC systems (ServiceNow, SailPoint, etc.).
* A employee title listing file sourced from your HRIS or ERP system (SAP, Oracle, Microsoft Dynamics, Workday, etc.)
* A application owner file sourced your IT service management system (Jira, Azure DevOps, ServiceNow IT, etc.).
* [Parameters](https://docs.auditboardanalytics.com/workflows/parameters)
  1. Review Request Date: Date on which review was commissioned
  2. Review Completion Date: Date on which review was completed
  3. Timeliness Threshold: Days between review creation and signoff to be considered timely
  4. [File Input Parameters](https://docs.auditboardanalytics.com/workflows/parameters/file-input-parameters)

### Output Expectations

* A population of employees marked in listing, but not included in the reviewed population marked for follow up.
* A population of manager or application owners who may have reviewed their own access tagged as passing or failing
* A determination If all users were reviewed in the completed access review categorized as passed or failed.
* A determination of timeliness based on adherence to the timeliness threshold, categorized as passed or failed.
* A determination of appropriate Manager or Application Owner review of user access, categorized as passed or failed.
* A determination if access has been correctly revoked, categorized as passed or failed.
