Access review
Access review compares every Role’s Permissions with the Verbs it called in the last 30 days, every night, and removes the unused ones.
Access review compares every Role’s Permissions with the Verbs it called last month and removes the unused ones.
Trigger
Runs every day. Part of Security, run by the Engineering Team.
Steps
- List each Role’s Permissions.
- Compare them with the Verbs the Role called in the last 30 days.
- Remove Permissions unused for 30 days.
- Rotate secrets older than 90 days.
- Report every widened Permission to the Founder.
Outputs
Example
On the 1st, Access review finds the Prospector Role has not called delete on Contact in 30 days. The Permission is removed, and the Founder reads the report.