Watch this short walkthrough to see User Access Reviews end to end — creating a campaign, reviewing access, monitoring progress, and producing an audit-ready record.
What is User Access Review?
User Access Review (UAR) is a guided certification workflow in DataBee that helps your organization confirm that every user's access to critical applications is still appropriate and approved by the right people. Periodic access reviews are a core control for least-privilege enforcement and for demonstrating compliance with frameworks such as SOX, PCI-DSS, ISO 27001, and SOC 2.
DataBee draws the access data it already collects across your connected applications into a point-in-time snapshot, organizes it into a campaign, and routes each access item to the appropriate reviewer for an Approve or Deny decision. Denied access is then handed off for remediation, and every action is recorded in an audit trail.
Where to find it
Select User Access Review in the top navigation bar. The page opens to the Access Reviews list, which shows your campaigns.
The Access Reviews page lists campaigns. By default the list is filtered to Active campaigns.
Key concepts
- Campaign — a single access review cycle covering one or more applications, with a due date and a defined set of reviewers.
- Review item — one user's access to one application (including the role, access paths, and supporting context) that must be certified.
- Reviewer / Approver — the person responsible for approving or denying assigned review items.
- Leader — a manager whose team's access is being reviewed; campaign managers can track and nudge leaders from the dashboard.
- Decision — the Approve or Deny outcome recorded for a review item. Denials capture a justification.
- Remediation — the follow-up that revokes denied access, tracked through ServiceNow tickets.
- Audit trail — a chronological record of the actions taken during a campaign.
Roles and permissions
What you can do in UAR depends on the permissions assigned to your role:
| Permission | Allows |
|---|---|
| View Access Reviews | See the User Access Review navigation item and the campaigns list. |
| Manage Access Reviews | Create, edit, and complete campaigns; view the campaign dashboard and audit trail; notify leaders. |
| Approve Assigned Reviews | Open the Review Queue and approve or deny assigned access items. |
User Access Review must also be entitled for your tenant. If you do not see the navigation item, contact your DataBee administrator.
The campaigns list
Each row represents a campaign and shows its name, status, deadline, the applications in scope, progress, and who created it. You can sort by any column and narrow the list using the Status, Applications, and Date Range filters above the table. Removing the default Active status filter reveals campaigns in every state.
Removing the Active filter shows campaigns across all statuses: Active, Completed, and Archived.
A campaign moves through three statuses:
- Active — reviewers are making decisions; the campaign is open until its deadline or until completed.
- Completed — the review cycle has been closed; denied items move to remediation.
- Archived — the campaign is retained for record-keeping and is read-only.