Overview
This document provides instructions on how to define and create an access review. This function can be done by admin users.
In this guide you will learn:
The types of access reviews that can be created
How to define the users and/or applications to be included
Learning the options for advanced settings
Step 1
To create a new campaign, click Create on the page that lists all the current and completed Access Review Campaigns.
Enter a name, short description and a due date. These fields can be edited at a later date.
A new campaign will be created. By default the user that creates the campaign is defined as the Campaign Monitor. Additional monitors can be added.
Step 2
A Campaign monitor can filter the list of users to be included in the access review. By default all directory users are included. A warning icon flags users without a defined manager.
Select the applications to be reviewed. You can filter the list to specific departments or regulations. A warning icon indicates applications that do not have any data or have out of date data. Use the Get Ready feature to collaborate with your company to update your data for your campaign.
The “Limit Permissions to Review” link allows you to further customize which permissions for each app will be reviewed, by name. If you don’t enter anything here, all permissions for the selected apps will be included in the review.
You can limit the review to specific permissions, or you can just exclude certain permissions from the review. Enter a comma-separated list in the appropriate field. The text is case-insensitive but needs to match the whole name of the permission. You can use an asterisk * as a wildcard: for example, “admin*” will match “Administrator”; “*reader* will match any phrase with “reader” or “Reader” in it. “default” matches Zilla’s default permission for users with no explicitly set ones.
Step 3
To customize your campaign for your specific requirements, edit Campaign Settings.
Note: If selecting “Yes - Reviewers get an additional option to request a Change to the existing permission” for “Allow Requesting Permission Change”, any review marked as Change will be tracked on the Report tab as a Revoke.
Navigate to the preview tab to preview campaign before it is run.
Any questions? Contact support@zillasecurity.com