Access review

What this worksheet records

An access review asks whether each person or service still needs the precise permissions it holds. Record the organisation or client scope, permitted action and source grant rather than a vague list of account names. A supplier may need one released package without access to competing quotations, all equipment or another client's files. Review expiry and changed responsibilities against the actual relationship. Do not put passwords, access tokens or private keys into this worksheet.

Complete and review it

Use the commissioned identity system or agreed administrative process to change or revoke permissions. The CSV can plan the work but cannot enforce it. Verify the result against the affected file, cache, pending-job and export routes where applicable, recording what was tested and any remaining exception. When an agency relationship ends, preserve the client's ownership and permitted continuity while removing the agency's unneeded access. Retain the review decision and its evidence rather than assuming a removed navigation link blocks retrieval.

Field definitions

• review_id: A stable identifier for this review, used to connect related rows without merging unrelated records.
• organisation_or_client: The actual organisation or client relevant to this row’s declared purpose. Record the source or unresolved question where it is not confirmed.
• person_or_service: The actual person or service relevant to this row’s declared purpose. Record the source or unresolved question where it is not confirmed.
• role: The actual role relevant to this row’s declared purpose. Record the source or unresolved question where it is not confirmed.
• record_scope: The actual boundary of record scope for this row; name inclusions and exclusions instead of implying unlimited applicability or access.
• allowed_action: The actual allowed action relevant to this row’s declared purpose. Record the source or unresolved question where it is not confirmed.
• grant_reference: The actual attributable source for grant reference; a reference is not evidence that a decision was authenticated or its content verified.
• expiry_date: The actual expiry date, with date format or period meaning explicit; distinguish requested, planned, confirmed and observed values.
• last_checked: The actual last checked relevant to this row’s declared purpose. Record the source or unresolved question where it is not confirmed.
• revocation_required: The current revocation required supported by the record, preserving unknown, proposed and confirmed outcomes as distinct states.
• revocation_request: The actual revocation request relevant to this row’s declared purpose. Record the source or unresolved question where it is not confirmed.
• actual_verification: The current actual verification supported by the record, preserving unknown, proposed and confirmed outcomes as distinct states.
• review_owner: The named person or agreed role responsible for review owner; confirm its real scope rather than assuming authority from a typed name.
• open_exception: The specific unanswered open exception that needs an owned response before the relevant next gate can close.

Prepare a deliberate export

The access list is sensitive operational information. Keep it within the authorised administration and review scope. A public example must remove identities and internal references; downloading the blank worksheet grants no account privileges.

Take it to the next job

• Review exact client, record and action scope.
• Keep secrets out of the review and use the real permission system.
• Verify revoked access against relevant retrieval and export routes.