Review access

Who can do this

The owner and access administrators review. People who read the organisation's access read the reviews. For organisations taking part in testing roles of their own (beta).

Open in GISweaver

Go through every role your people hold beyond membership, and every use of emergency access since the last review, and decide each one.

Reviews are part of the beta programme. If you see no Reviews tab, select Ask GISweaver support to switch on your own roles. on the Access page.

1. Open Access from Organisation controls. The Access page opens.

2. Select the Reviews tab. A review opens on its own at the cadence you set; to start one now, select Start a review now. Sensitive access and emergency access come first.

   3. On an item, select Confirm if the person should keep the role, End to take it away now, or Defer to look at it again in the next review. A box opens with the item's name. 4. Give a reason in Reason. The box keeps what you typed. 5. For Defer only, choose the day under Look at it again on (tomorrow to 90 days ahead). The day shows in the box. 6. Select Confirm it, End it or Defer it. The item shows your decision. 7. Decide every item. The review is complete when the last one is decided, and it moves under Past reviews. 8. Under Past reviews, select Download the record (JSON) (Download the signed record (JSON) on a review GISweaver signed) or Download as spreadsheet (CSV). The file downloads.

An item from a role given to a team or a branch carries a Team access tag. Ending it takes the role away from everyone who held it through that team or branch.

What happens next

Ending an item ends the role exactly as ending it from People or Access would, and the person is told. A deferred item comes back first in the next review, marked Deferred last time.

A completed review cannot be changed. Past reviews marks each record Signed by GISweaver or Not signed by GISweaver. Download a record to keep as evidence.

The owner and access administrators are told by the bell and by email when a review opens, when it is overdue (30 days after it opened), and once a week for the next two weeks. Review notices cannot be turned off.

To change how often access is reviewed, see Set how often access is reviewed.

If something goes wrong

• Access reviews are switched on with your own roles, which are not on for …. Your organisation is not in the beta yet. Select Ask GISweaver support to switch on your own roles. to open a ticket already written, then send it.
• You cannot review your own access. Another access administrator or the owner decides items about you.
• Ending this is not part of your roles. The Owner or an Admin ends it from People. Confirm or defer the item, or ask them.
• This access has already ended. It ended after the review opened. Confirm the item to record that.
• A review is already open. Finish it first.

Details

• The owner's roles are not reviewed: the owner holds every permission. The owner's uses of emergency access are, and another access administrator decides them; when there is none, they stay listed as a record and the review can still complete.
• Part of the beta programme. Once it is on, your plan must also include access reviews to open a new one.
• If your plan does not include access reviews, no new review opens, whether by hand or on the schedule. A review that is already open can still be decided, completed and exported.
• Every review started, every decision and every completed record is written to the audit trail.