Access review
Pro feature
Requires a MIA Pro subscription.
Access review lets a manager periodically validate the list of people who can access an application, ensuring that only the right users keep their access.
A review cycle
- Launch a review from the application's page, ⋯ menu at the top right: all its access moves to "Pending".
- Send the link to the application's manager, designated in the Settings tab: they receive a secure link to a review page.
- The manager approves or rejects each access, individually or in bulk. The link stays valid for a configurable window: 1 hour, 1 day, 1 week or 1 month.
- Complete access review: MIA generates a CSV export of the result and emails it to you.
The manager's page
The manager has no MIA account: the link opens a page for them alone, which names your company (its name, otherwise its domain, set under Configuration → Organization) and the application to review. It shows the progress (access decided out of the total) and the link's deadline. Complete access review is only possible once every access is decided, and the page says how many are left.
Once the link has expired, the page refuses any decision and any completion: send a new link from the banner of the Users tab. The page shows neither the online support nor session recording, since it displays the names and addresses of your users.
During the review, a banner at the top of the Users tab tracks the progress (access decided out of the total) and carries the Send the link and Complete access review actions. You can also decide yourself, in the Decision column of the table or in bulk after selecting rows. A review launched by mistake is stopped with Cancel the review, in the same ⋯ menu.
Automatic reminders
In the application's Settings tab, choose a reminder frequency (every 3 months, every 6 months or every year): MIA will remind you to launch a new review when the time comes.
An application whose review is past its date is counted on the To do page, under Overdue access reviews, and found in the applications list with the Status: Review overdue filter. A review in progress is not overdue.
Good to know
Access review is advisory: it produces a report (CSV) to decide which access to revoke, but it doesn't automatically close the flagged access. Closures are then done through access opening & closing.