Importing a list of application users from a CSV file
Roles and permissions
The following roles can add an application user list for an access review:
Administrators with manager permissions for the access review
Compliance managers with manager permissions for the access review
Users with manager permissions for the access review
During the access review setup process, you create one or more lists of application users. This information is combined with directory records to provide additional data during an access review. You can either import a list of application users from a CSV file or use a Hypersync to retrieve the data from a specific application and add it to your access review.
For more information on using a Hypersync, see Importing a list of application users with a Hypersync and Importing a list of application users from an Identity Provider (IdP).
The sections below explain how to create and import a list of application users:
Creating an import CSV
To add a user list to an access review, set up a CSV file of user records with specific information. In most cases, you can export user access data from the application being reviewed. Keep in mind that if you are working with exported data, you may need to transform the data to meet the requirements of the CSV file.
If exporting user data from an application isn't an option, you can download a sample CSV and replace the contents with your data. See Downloading the example CSV.
Export user data in CSV format from the application you need to review. See the CSV fields table below for information on the data to export.
Open the file in an editor such as Excel to view and modify it for import.
Rename the column headings to match the column names in the CSV fields table shown below.
Combine columns as needed. For example, the import requires an employee's full name in a single field, but your export may have first and last names in separate columns. In this case, the first and last name columns must be combined.
Importing the CSV file
After configuring the CSV file containing your application user list, you can import it into Hyperproof. When setting up an application to review in Hyperproof you can configure a new application to review and import the CSV file immediately or you can configure the application and then import the CSV later.
From the left menu, select Access reviews.
Select the access review you are setting up.
Select the Setup tab.
To add a new application entry and import your CSV:
Under Applications to review click the + New button.
The Add application window displays.
Enter a unique name for the application. This field is required.
In the Sysadmin field, select a default person to implement any change requests from the reviewer and attest that they have updated user access to the application. All users imported for this application will be assigned to this default person to attest to the changes. This field is required but can be updated later for individual user records.
In the Reviewer field, select a default reviewer. This field is required.
If you select an existing Hyperproof user, all users imported for this application will be assigned to this default reviewer. Reviewers can be updated later for individual users.
If you select Assign to direct manager as the default reviewer, Hyperproof checks each user's email address on the application user list and uses it to look up their direct manager in the directory configured for the access review. That manager is assigned as the reviewer. See Using direct managers as reviewers for user access.
If you select Assign to sysadmin as the reviewer, the sysadmin selected in the previous step is assigned to all user records.
Enter a description for the application. This field is optional.
If you don't have an import CSV file ready now, click Create to add the application and import the CSV later.
If you have an import CSV file, click the Import access list button.
The Choose app window displays.
Under Apps, select Manual import.
The Import screen displays. Continue with Step 6.
To import your CSV into an existing empty application:
Under Applications to review click the name of the empty application.
The Details tab for the application displays.
Click the Records tab.
Click the Import link.
The Import screen displays. Continue with Step 6.
Drag-and-drop the CSV file into the Upload CSV File field, or click Select file to upload to browse to the location of the CSV file you want to import.
Click Import.
Hyperproof checks the format within the CSV file to ensure that there are no errors. If any errors are found, Hyperproof displays an error message
If Hyperproof didn't detect any errors, click Next. If there are errors, do the following:
Resolve the errors by double-clicking the cell with the highlighted error and correcting the value.
Remove rows that contain errors by clicking Remove all rows with errors.
Click Next.
The CSV file is imported.
Downloading the example CSV
If you can't export user access data from the application you need to review, you can manually create your own CSV file. The easiest way to understand the required format for your CSV is to start with the example CSV provided in Hyperproof. The example CSV file provides the exact template for importing your user access list. You can replace the contents of the example CSV file with your own data by entering user information.
From the left menu, select Access reviews.
Select the access review you are setting up.
Select the Setup tab.
Under Applications to review click the + New button.
Enter a unique name for the application. This field is required.
In the Sysadmin field, select a default person to attest that they have updated user access to the application. All users imported for this application will be assigned this default person to attest to the changes. This field is required but can be updated later for individual users.
In the Reviewer field, select a default reviewer. This field is required.
If you select an existing Hyperproof user, all users imported for this application will be assigned to this default reviewer. Reviewers can be updated later for individual users.
If you select Assign to direct manager as the default reviewer, Hyperproof checks each user's email address on the application user list and uses it to look up their direct manager in the directory configured for the access review. That manager is assigned as the reviewer. See Using direct managers as reviewers for user access.
If you select Assign to sysadmin as the reviewer, the sysadmin selected in the previous step is assigned to all user records.
Enter a description for the directory. This field is optional.
Click the Import access list button.
The Import screen with details about the CSV file displays.
Under Example, click the Download the example CSV link.
An empty application is created and the example CSV file is downloaded to your default downloads location. When your CSV file is ready, you can open the empty application and import the CSV.
