Drata User Access Reviews centralizes access information from connected applications and manually added systems so organizations can run scheduled reviews without spreadsheets or screenshots. Teams choose review periods, applications, and designated reviewers, then inspect account access, MFA status, permission changes, former employees, service accounts, and administrative privileges. Reviewers can approve, reject, or mark accounts out of scope and document decisions with notes for audit evidence. Nightly synchronization keeps access information current during the review instead of relying on a static snapshot. When an application review is completed, Drata generates CSV evidence, combines it into an audit package, maps it to the appropriate access-control review, and stores it in the Evi

Join for free to read