Roles
Access Reviews
Record periodic reviews of who holds a role.
In the admin: Roles › a role › Access reviews
An access review is a periodic check that the people holding a role should still hold it: someone who changed jobs, a contractor who left. Many security standards ask for one, with evidence. Access reviews keeps that evidence in TotalBase.
Recording a review
Look through the role's Members, remove whoever shouldn't be there, then Record review:
| Field | |
|---|---|
| Outcome | No changes, or Changes made |
| Note | what you checked or changed |
The history lists every review: when, who reviewed, the outcome, how many members the role had then, and the note.
How often
Access review interval, in Settings › Access › Authentication, sets how often the Administrators role should be reviewed: every 90 days by default, 0 to turn the reminder off. The section shows when the next review is due.