Copying an access review
Roles and permissions
The following roles can copy an access review:
Administrators
Compliance managers
Access reviews are often performed on a quarterly basis. If you need to conduct an access review using the same directory and application user access lists as a previous access review, you can copy a previous access review and reuse some of the existing data. The copied access review contains the same data except for the associated proof and the review records. Members of the previous access review do not become members of the new access review.
Note
Archived access reviews can't be copied. However, you can unarchive an access review if you need to copy it.
The source access review doesn't have to be in a Completed status to be copied. Data for the new access review is handled as follows:
Name and description - These fields are populated by the user on the Create window before the copy process is initiated.
Facepile - Membership in the access review consists of the user who copied the access review. That user is the manager and owner. All other users are removed.
Default reviewer and sysadmin - The default reviewer and sysadmin are copied to the new access review.
Status -The access review status is Setup.
Linked controls - And controls linked to the access review are copied.
Directories - Names and descriptions of all directories are copied to the new access review, but the employee records are not.
If the original directory was created by importing a CSV file, import a new CSV file or configure a Hypersync to populate it with your employee records. See Importing a directory from a CSV file.
If the original directory was created using a Hypersync to import data, the Hypersync configuration is copied to the new access review. The Hypersync runs immediately and loads fresh data. To refresh the data, use the Sync now option on the People tab of the directory. See Refreshing a directory using a Hypersync.
Applications - Names and descriptions of all applications are copied to the new access review, but the user records are not.
If the original user application list was created by importing a CSV file, import a new CSV file or configure a Hypersync to populate the list with user records. See Importing a list of application users from a CSV file.
If the original application user list was created using a Hypersync to import data, the Hypersync configuration is copied to the new access review. The Hypersync runs immediately and loads fresh data. To refresh the data, use the Sync now option on the People tab of the application user list. See Refreshing an application user list.
To copy an access review:
From the left menu select, Access reviews.
On the Access reviews page, click the + New button.
The New access review window displays.
In the Name field, enter a unique name for this access review.
Check the Start from previous access review checkbox.
In the Select review field, click the drop-down and choose an existing access review.
In the Description field, enter a description for this access review. This field is optional.
In the Primary contact field, select a user in your organization to own this access review. This field is optional and defaults to the user creating the access review.
Note
The user who creates the access review and the Primary contact could be different users in your organization. Both are added to the access review as managers.
Click the Create button.
Hyperproof creates the access review and displays its dashboard.