Results for “access-review”

Use this skill when a periodic user access review is due, an auditor asked for access review evidence, or someone says "prepare the access review", "run the quarterly user recertification", "who still has admin", "check leavers still have access", "build the access review sheets for managers" or "our last review was a rubber stamp". Picks the systems in scope, builds account populations reconciled against HR, pre-flags leavers, orphans, shared and dormant accounts, assigns independent reviewers, defines the decisions to record, and plans the removal follow-up.

The English summary is being prepared. Showing the original description.

Plan periodic access reviews for AWS IAM, GitHub, Okta, and other identity systems. Provides guidance for identifying unused access, assigning reviewers, documenting approval or removal decisions, and organizing evidence for compliance audits.

• Planning periodic access reviews
• Reviewing inactive accounts and unused credentials
• Checking access against current job responsibilities

Organize primary and backup administrators, two-factor authentication, shared logins, and access review dates for each system. Get a practical register design or request empty templates in CSV, SQL, JSON Schema, or a Notion property mapping.

• Reviewing administrator access each quarter
• Checking accounts left behind by former employees
• Creating an administrator register template

Conduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.

The English summary is being prepared. Showing the original description.

Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken access".

The English summary is being prepared. Showing the original description.

Admin account register: system, main and backup admin, seats, plan, 2FA, shared logins and access-review dates, as CSV, SQL, JSON Schema or Notion on request. Use for access reviews.

The English summary is being prepared. Showing the original description.

Conduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.

The English summary is being prepared. Showing the original description.

Use when an assignment must expire on a date, not stand forever. Trigger keywords: permission set expiration date, permission set group expiry, temporary access, time-boxed elevation, contractor access, ExpirationDate. NOT for PSG composition - use admin/permission-set-group-composition. NOT for muting mechanics - use security/permission-set-groups-and-muting. NOT for criteria-based auto-assignment - use admin/user-access-policies.

The English summary is being prepared. Showing the original description.

Turns an access export (accounts, entitlements, grant and last-used dates per system) into a draft access review pack, one section per system owner: who has what, since when, anomalies to confirm and the decision each line needs, with a blank column for the owner's decision. Never decides, revokes or rates access. Use when the user asks to "prepare the access review pack", "split this entitlement export by system owner", "who has access to what in this system", "build the recertification pack from this export" or "draft the access attestation for the owners". Do not use for a single request for a tool or access, use software-request-review instead. Drafts for human review; never approves, authorises or signs off.

The English summary is being prepared. Showing the original description.

Conduct periodic access reviews and certifications. Implement access governance and recertification workflows. Use when managing access compliance.

The English summary is being prepared. Showing the original description.

Admin account register: system, main and backup admin, seats, plan, 2FA, shared logins and access-review dates, as CSV, SQL, JSON Schema or Notion on request. Use for access reviews.

The English summary is being prepared. Showing the original description.

Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken access".

The English summary is being prepared. Showing the original description.