---
title: "User Access Review Overview"
slug: "user-access-review-overview"
updated: 2026-11-02T21:31:29Z
published: 2026-11-02T21:31:29Z
canonical: "docs.databee.buzz/user-access-review-overview"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# User Access Review Overview

Watch this short walkthrough to see User Access Reviews end to end — creating a campaign, reviewing access, monitoring progress, and producing an audit-ready record.

## What is User Access Review?

User Access Review (UAR) is a guided certification workflow in DataBee that helps your organization confirm that every user's access to critical applications is still appropriate and approved by the right people. Periodic access reviews are a core control for least-privilege enforcement and for demonstrating compliance with frameworks such as SOX, PCI-DSS, ISO 27001, and SOC 2.

DataBee draws the access data it already collects across your connected applications into a point-in-time snapshot, organizes it into a **campaign**, and routes each access item to the appropriate reviewer for an **Approve** or **Deny** decision. Denied access is then handed off for remediation, and every action is recorded in an audit trail.

## Where to find it

Select **User Access Review** in the top navigation bar. The page opens to the **Access Reviews** list, which shows your campaigns.

![The Access Reviews page lists campaigns. By default the list is filtered to Active campaigns.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/uar-campaigns-list.png?sv=2026-02-06&spr=https&st=2026-11-11T14%3A42%3A26Z&se=2026-11-11T15%3A42%3A26Z&sr=c&sp=r&sig=GpMljnQ4Efb6eBB%2Fyax57atKqBPg7dWfLm0P%2BN5QyzM%3D)

*The Access Reviews page lists campaigns. By default the list is filtered to Active campaigns.*

## Key concepts

- **Campaign** — a single access review cycle covering one or more applications, with a due date and a defined set of reviewers.
- **Review item** — one user's access to one application (including the role, access paths, and supporting context) that must be certified.
- **Reviewer / Approver** — the person responsible for approving or denying assigned review items.
- **Leader** — a manager whose team's access is being reviewed; campaign managers can track and nudge leaders from the dashboard.
- **Decision** — the Approve or Deny outcome recorded for a review item. Denials capture a justification.
- **Remediation** — the follow-up that revokes denied access, tracked through ServiceNow tickets.
- **Audit trail** — a chronological record of the actions taken during a campaign.

## Roles and permissions

What you can do in UAR depends on the permissions assigned to your role:

| Permission | Allows |
| --- | --- |
| **View Access Reviews** | See the User Access Review navigation item and the campaigns list. |
| **Manage Access Reviews** | Create, edit, and complete campaigns; view the campaign dashboard and audit trail; notify leaders. |
| **Approve Assigned Reviews** | Open the Review Queue and approve or deny assigned access items. |

User Access Review must also be entitled for your tenant. If you do not see the navigation item, contact your DataBee administrator.

## The campaigns list

Each row represents a campaign and shows its name, status, deadline, the applications in scope, progress, and who created it. You can sort by any column and narrow the list using the **Status**, **Applications**, and **Date Range** filters above the table. Removing the default *Active* status filter reveals campaigns in every state.

![Removing the Active filter shows campaigns across all statuses: Active, Completed, and Archived.](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/uar-campaigns-all-statuses.png?sv=2026-02-06&spr=https&st=2026-11-11T14%3A42%3A26Z&se=2026-11-11T15%3A42%3A26Z&sr=c&sp=r&sig=GpMljnQ4Efb6eBB%2Fyax57atKqBPg7dWfLm0P%2BN5QyzM%3D)

*Removing the Active filter shows campaigns across all statuses: Active, Completed, and Archived.*

A campaign moves through three statuses:

- **Active** — reviewers are making decisions; the campaign is open until its deadline or until completed.
- **Completed** — the review cycle has been closed; denied items move to remediation.
- **Archived** — the campaign is retained for record-keeping and is read-only.

## Next steps

- [Before You Begin: What User Access Review Needs](/user-manual/docs/before-you-begin-what-user-access-review-needs)
- [Creating an Access Review Campaign](/user-manual/docs/creating-an-access-review-campaign)
- [Reviewing Access (The Review Queue)](/user-manual/docs/reviewing-access-the-review-queue)
- [Monitoring Campaign Progress](/user-manual/docs/monitoring-campaign-progress)
- [Remediating Denied Access](/user-manual/docs/remediating-denied-access)
- [Tracking Activity with the Audit Trail](/user-manual/docs/tracking-activity-with-the-audit-trail)