Access Reviews & Certification Campaigns
Regularly check who still needs access. Assigned reviewers can keep, reduce or remove existing permissions. Access reviews cannot grant new permissions.
Existing interface image for orientation only. Framework names, status labels and signature stamps do not establish certification, legal conformity or a tested deployment. Use the qualified feature descriptions below.
How it works and what to check
Over time, access quietly accumulates. People change roles, projects end, and permissions that were once needed linger long after they should. That drift is exactly what auditors look for and attackers exploit. Dockria's Access Reviews give you a disciplined, repeatable way to keep permissions aligned with the principle of least privilege.
Reviews are organised into campaigns. Each campaign has a name and description, a scope covering all users or specific groups, a defined review period, and the reviewers responsible for it, typically the managers who actually know who needs what. This turns recertification from an ad-hoc scramble into a structured, scheduled process.
For each item, reviewers make a clear decision: Maintain the access exactly as it is, Modify it by keeping some assignments and revoking the rest, or revoke it entirely. An anti-escalation safeguard is built in. The system rejects any change that would grant new permissions, so a review can only ever confirm or reduce access, never quietly expand it.
Verify notification delivery and available decision records in the configured deployment. The dossier does not establish a completed access-review campaign, exhaustive logging or regulatory acceptance.
Key Benefits
Scheduled Campaigns
Organise recertification into named campaigns with defined periods, turning access review into a structured, repeatable process.
Targeted Scope
Scope each campaign to all users or specific groups, and assign the reviewers who actually know who needs what.
Maintain, Modify, or Revoke
Reviewers make a clear decision on every item: keep access as is, trim it, or remove it entirely.
Anti-Escalation Safeguard
The system rejects any change that would grant new permissions, so reviews can only confirm or reduce access, never expand it.
User Notification
Affected users are informed that their access was reviewed, keeping the process transparent and accountable.
Decision Evidence Evaluation
Confirm which review decisions and details are available for export and how long they are retained.
Industry Use Cases
Teams can organise access certification reviews for sensitive records. Review frequency and evidence requirements need a separate assessment; a campaign does not guarantee acceptance by examiners.
Agencies periodically recertify access to official information, demonstrating disciplined governance to oversight bodies.
Firms review who can reach privileged matters, ensuring access ends when a lawyer leaves a case or the firm.
Hospitals recertify access to patient records on a schedule, supporting data-protection and least-privilege obligations.
Related Features
See How This Feature Applies to Your Industry
Ready to see access reviews & certification in action?
Schedule a personalised demo and discover how Dockria can transform your document management operations.
Request a Demo