Automatically Generated UER Campaigns in Access Panel

Identity Panel's Access Panel includes a powerful feature for generating on-demand User Entitlement Review (UER) campaigns based on user groupings. This capability helps organizations streamline access reviews, ensure compliance, and improve visibility into who has access to what systems and why.

How Group-Based UER Campaigns Work

Access Panel automatically groups users by their assigned applications. These groupings can be dynamically created using entitlements (what access is granted), request policies (how access is requested or approved), and exclusion rules (which users or roles are not included by default). Campaigns are then generated on demand using these user sets as the basis for review.

Here’s how the system builds these groupings:

• Assigned Applications: Each user is matched to applications they can access, based on entitlement mappings.

• Entitlements: These are defined access rights (like membership in a group or role). They are often tied to resources like cloud apps, databases, or internal tools.

• Approval Workflows: The system references request policies and approval chains to include workflow metadata in the campaign.

• Default Exclusions: Rules can be applied to automatically exclude certain users (like system accounts or service identities) from the review set.

These elements allow Access Panel to create relevant, targeted reviews that require minimal manual setup.

Key Benefits for Your Organization

This automated approach to UER campaigns provides the following advantages:

• Audit-Ready Evidence: Every campaign includes full details of who has what access, how it was granted, and who approved it.

• Reduced Administrative Burden: Access Panel eliminates the need for IT teams to manually create and manage review lists.

• Improved Compliance: By including approval workflows and exclusions, the system ensures reviews are aligned with internal controls and regulatory standards.

• Dynamic Grouping: User lists stay current with underlying identity and entitlement changes, minimizing stale data.

UER campaigns can be triggered manually or integrated into scheduled compliance cycles, with attestation results stored for audit purposes.