To help you demonstrate that your users’ permissions are regularly Reviewed, and allow you to maintain an accurate audit log of those Reviews, Activ maintains a permanent record of all Formal Permissions Reviews that have been conducted against each of your users. The data from these Reviews is automatically stored against each user in a dedicated Permissions Review Log, which can be accessed at any time by anyone who has ‘Admin’ permissions to the System Administration: Administrator area.
Each entry within a user’s Permissions Review Log contains key information regarding who completed the Review and when the Review occurred, and when and by whom the new Review is due to be completed (if one has been scheduled). In addition, the log includes links to pre-filtered reports showing any permissions changes that were made during each Review, giving you full traceability of when and why those changes were made. Together, this information provides you with confidence that Formal Reviews are being completed both regularly and accurately, and allows you to verify that the appropriate adjustments are being made at the appropriate times.
*****
To view a user’s Permissions Review Log, open the individual’s record on its Login Permissions tab and click on the Permissions Review Log button in the blue banner along the top of the tab.
Activ will open a register displaying all formal Permissions Reviews that have previously been completed for the user. Each Review will be listed on its own line within the register, and will be displayed chronologically by the date on which they took place. In addition, each record will include the following data:
Reviewed Date – the date and time on which the Review was conducted.
Reviewed By – the user who conducted the Review.
Scheduled Date – the date that the Review was originally scheduled for.
Next Date – the date specified for the next Review. This will be blank if no future Review was specified.
Next Reviewer – the person assigned to conduct the next Review. This will be blank if no future Review was specified.
Notes – the notes that were recorded as part of the Review. This field will expand to display notes up to a maximum of 2000 characters.
Finally, each record will also include a dedicated View Permissions Changes button, which will be displayed to the far right of the corresponding Review. When clicked, this button will shortcut you to the user’s Permissions Change Log, filtered to display the date on which the Review took place. This allows you to quickly identify any permissions changes that were made as part of the Review.
