Attesting to user access updates
Roles and permissions
The following roles can attest to user access updates for an access review:
Administrators who have been assigned as the Sysadmin for user records in the access review
Compliance managers who have been assigned as the Sysadmin for user records in the access review
Users who have been assigned as the Sysadmin for user records in the access review
Updating user access and attesting to those updates can be done by one or more people in your organization. For example, application administrators or other IT personnel could update access to an application and attest to the updates in Hyperproof.
Note
To attest to user access updates, the access review status must be In progress and the reviewer should have completed the entries in the Maintain access and Access notes columns of the review page. See Setting access review status.
You may have a case where a change to user access has been requested, but it is not necessary. For example, if you have a user who is out on extended leave, you may decide that the account can be suspended temporarily, instead of updating user access. This should be noted in Hyperproof.
To attest to user access updates:
From the left menu, select Access reviews.
Select the access review you want to update.
Select the Review tab.
A dashboard of Applications to review displays.
Click the card for the application you want to review.
A list of users displays.
For each user with No selected in the Maintain Access column, click either Yes or No in the Access updated column.
If you select Yes for a user, you are attesting that the user access updates have been done in the application.
If you select No, the Edit sysadmin notes window displays. In the text field, enter any pertinent information about why the changes weren't made to this user's access. This information is required.
To edit notes, click in the Sysadmin notes field to open the Edit admin notes window.
Review page fields
The review page includes the following information.
Field | Definition |
---|---|
(# Records) | The number of user records included in the access review. |
Status | Statuses include:
|
Account to review | Full name and username or email of the user whose access is being reviewed. NoteIf both username and email were included when creating the application user list, the username takes precedence and is displayed. Email is hidden. |
Role | Role assigned to the user for this application, such as user or administrator. Role names are determined by the application. |
Last login | The last time this user logged into the application being reviewed. Use this date to locate accounts that are no longer being used. |
Job title / Department | The job title and department of the user being reviewed. This information is pulled from the employee directory and is matched to the user record based on the user's email address. If the email address is not available, Hyperproof tries to match based on the user's full name. |
Employment status | The user's employment status. This information is pulled from the employee directory and is matched to the user record based on the user's email address. If the email address is not available, Hyperproof tries to match based on the user's full name. |
Maintain access? (At current role) | Indicates whether or not the user should maintain their current access to the application. Options include:
|
Access notes | Notes containing information about the access changes needed for a user. Notes are required for any user where the Maintain access field is set to No. To update or add a note, click in the notes field. |
Access updated | Indicates whether or not the user's access has been updated in the application. This is where the person responsible for updating user access attests that the update has been done. Options include:
|
Sysadmin notes | Notes about updating a user's access. Notes are required for any user where the Access updated field is set to No, indicating that the requested updates were not done. For example, if a user is on a temporary leave, it may be better to suspend the user account than to remove permissions. When the user returns, you can reinstate their account without having to reconfigure all of the permissions. To update or add a note, click in the notes field. |
Reviewer | Name and email address of the person reviewing the selected record. Reviewers can only see the records assigned to them unless they are the owner of the access review. |
Sysadmin | Name and email address of the person attesting to the access updates for the selected user record. The Sysadmin can only see records assigned to them unless they are the owner of the access review. |
Groups | List of groups this user belongs to if groups are used to assign permissions. |
Manager | Name and email address of the selected user's manager. This information is pulled from the employee directory and is matched to the user record based on the user's email address. If the email address is not available, Hyperproof tries to match based on the user's full name. |