Skip to main content

Copying an access review

Roles and permissions

The following roles can copy an access review:

  • Administrators

  • Compliance managers

Access reviews are often performed quarterly. If you need to conduct an access review using the same directory and application user access lists as a previous access review, you can copy a previous access review and reuse some of the existing data. The copied access review contains the same data except for the associated proof, tasks, and review records. Members of the previous access review do not become members of the new access review.

Note

Archived access reviews can't be copied. However, you can unarchive an access review if you need to copy it.

The source access review doesn't have to be in a Completed status to be copied. Data for the new access review is handled as follows:

  • Name - Populated by the user on the Create window before the copy process is initiated.

  • Description - Copied into the Description field when you select the source access review.

  • Facepile - Membership in the access review consists of the user who copied the access review. That user is the manager and owner. All other users are removed.

  • Default reviewer and sysadmin - The default reviewer and sysadmin are copied to the new access review.

  • Application reviews due and System updates due dates are not copied to the new access review. See Access review email notifications and reminders.

  • Deliver review tasks via and Deliver update tasks via fields on the access review are copied to the new access review. See Access review tasks.

  • Tasks are not copied to the new access review.

  • Status -The access review status is Setup.

  • Linked objects - Controls and labels linked to the access review are copied.

  • Directories - Names and descriptions of all directories are copied to the new access review, but the employee records are not.

    • If the original directory was created by importing a CSV file, import a new CSV file or configure a Hypersync to populate it with your employee records. See Importing a directory from a CSV file.

    • If the original directory was created using a Hypersync to import data, the Hypersync configuration is copied to the new access review. The Hypersync runs immediately and loads fresh data. To refresh the data, use the Sync now option on the People tab of the directory. See Refreshing a directory using a Hypersync.

  • Applications - Names and descriptions of all applications are copied to the new access review, but the user records are not.

    • If the original user application list was created by importing a CSV file, import a new CSV file or configure a Hypersync to populate the list with user records. See Importing a list of application users from a CSV file.

    • If the original application user list was created using a Hypersync to import data, the Hypersync configuration is copied to the new access review. The Hypersync runs immediately and loads fresh data. To refresh the data, use the Sync now option on the People tab of the application user list. See Refreshing an application user list.

To copy an access review:

  1. From the left menu select, Access reviews.

  2. On the Access reviews page, click the + New button.

    The New access review window displays.

  3. In the Name field, enter a unique name for this access review.

  4. Check the Start from previous access review checkbox.

  5. In the Select review field, click the drop-down and choose an existing access review.

  6. The Description field is populated with the description from the source access review. You can edit it now or after copying the access review. This field is optional.

  7. In the Primary contact field, select a user in your organization to own this access review. This field defaults to the user creating the access review.

    Note

    The user who creates the access review and the Primary contact could be different users in your organization. Both are added to the access review as managers.

  8. In the Application reviews due field, select the date the user reviews should be completed. This date is used to generate review tasks and send reminders to reviewers with outstanding items. See Access review email notifications and reminders

  9. In the System updates due field, select the date the system updates to user access should be completed. This date is used to generate system update tasks and send reminders to sysadmins with outstanding items. See Access review email notifications and reminders.

  10. The Deliver review tasks via field is populated with the delivery method chosen in the source access review.

  11. The Deliver update tasks via field is populated with the delivery method chosen in the source access review.

  12. Click the Create button.

    Hyperproof creates the access review and displays its dashboard.

In this section: