Access Reviews
Run periodic access certification campaigns to verify that every user still needs their privileges. Reviewers approve, revoke, or flag access grants — and OnePAM automatically enforces the decisions, revoking team memberships and access requests that fail review.
Feature Details
Included Capabilities
Certification campaigns — create review cycles with configurable scope, reviewers, and deadlines
Flexible scope — review all access org-wide, per team, or per resource group
Reviewer assignment — assign managers, team leads, or specific users as reviewers
Three-way decisions — approve to keep, revoke to remove, or flag for follow-up
Automatic enforcement — revoked access is removed immediately (team membership, access requests)
Bulk decisions — reviewers can approve or revoke multiple items at once
Progress tracking — real-time campaign progress with automatic completion detection
Deadline reminders — configurable reminder notifications before the review deadline
Auto-revoke on miss — optionally revoke unreviewed access when the deadline passes
CSV export — download campaign results for compliance reporting and auditors
Available on Business and Enterprise plans
Live Preview
Feature Overview
Secure Access — Overview
Zero Trust Access
Session Recording
Just-In-Time Access
Browser-Based
Getting Started
How It Works
1. Connect Identity Provider
Integrate with Okta, Azure AD, Google Workspace, or any SAML/OIDC provider in minutes.
2. Add Resources
Register your servers, databases, and web apps. Define role-based access policies.
3. Secure Access
Users access resources through the browser with identity verification, session recording, and audit logs.
Ready for Access Reviews?
Deploy in minutes. No legacy VPN required. No credit card required.