Running an access review

Many security policies ask you to review regularly who has access to pay data. The user access export gives you everything you need in one file.

Who can do this: Administrators with access to the whole organisation.

Where: Settings → People & data → Data management → Export User Access

Steps

1. Select Export User Access.

2. Open the CSV file. Each row is one current user with:

   • role;

   • capabilities;

   • scopes;

   • entity access, listed as "entity: role";

   • last sign-in.

3. Review the list, then change roles or remove users who no longer need access. See Inviting, changing and removing users.

Good to know

• Lists inside a cell are separated by "; ".

• Removed users aren't in the file.

• Last sign-in comes from the audit log. If a user's last sign-in is older than your audit log retention, the cell is empty. See The audit log.

• The export itself is recorded in the audit log.

Related articles

• Checking a user's access (View Access)

• Inviting, changing and removing users

• Roles: what Administrators, Managers and Employees see

• The audit log