Are there any plans of a access review / access attestation feature, or is it something you have already ruled out ?

Question

Access reviews are a common requierment for many security frameworks. Is this a feature you see being added in the future, or has it been ruled out has something that doesn't fit your vision for the product?

Comments

I was thinking a bit about the use case presented here by me, and i would like to know if what i had in mind would be possible with you current features.

1 - Create a scheduled task that removes all users in a group (There should be some abstraction that would allow me to keep all the groups that the rule should be applied to) every X months/weeks.

2 - The next step on the business rule would require the manager or someone responsible to aprove the removal of each member of the group.

3 - By default if the responsible doesn't aprove and the end date is reached no changes are made

++ Being able to create a remainder after X days have passed and the responsible hasn't made any decisions about the members of the group. ++ The manager is able to close the review by saying all changes necessary changes have been made

The ++'s are just things i think would be useful, but in no way necessary.

Do you think point 1-3 would be possible in your current implmentation?

---

Hello Pedro,

Generally, it is possible to fulfill points 1-3. However, not exactly the way described. First of all, there will be no general operation. A separate approval request will be created for removing each member from the group. As such, only removing a single member can be approved or denied. This makes point three almost impossible to fulfill. For example, the responsible person approves removal of one user and then ignores the requests for other accounts. What should be done in this case. Additionally, the workflow will require a lot of custom scripting.

Answer 1

Hello Pedro,

Unfortunately, there is nothing like that. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.