Creating an Access Review Campaign

This guide walks you through creating and launching an access review campaign to certify user access rights.

Prerequisites

Before creating a campaign, ensure you have:

• Administrator or Campaign Manager role in IdentityCenter
• Identity data synchronized from your sources
• Managers or resource owners identified as reviewers
• Email notifications configured

Step 1: Navigate to Access Reviews

1. Log in to IdentityCenter
2. Navigate to Access Reviews > Campaigns
3. Click New Campaign

Step 2: Configure Basic Settings

Campaign Types

Step 3: Define the Scope

What to Review

Select what access rights will be included:

Example Scope Configurations

All Active Users:

Scope: All Users
Filter: Status = Active

Engineering Department:

Scope: Department
Department: Engineering

Privileged Groups Only:

Scope: Group Members
Groups:
  - Domain Admins
  - Enterprise Admins
  - Server Operators

Custom Query:

Scope: Custom
Query: Department IN ('Finance', 'HR') AND JobTitle LIKE '%Manager%'

Step 4: Configure Reviewers

Reviewer Assignment Strategy

Manager-Based Configuration

Reviewer Strategy: Manager
Fallback Reviewer: IT Security Team
No Manager Action: Assign to Fallback

Handling Missing Managers

Step 5: Set the Timeline

Example Timeline

Campaign: Q1 2025 Access Review
Start Date: January 6, 2025
Due Date: January 24, 2025 (3 weeks)
Grace Period: 3 days
Hard Close: January 27, 2025

Step 6: Configure Notifications

Email Notifications

Reminder Schedule

Reminders:
  - 7 days before due date
  - 3 days before due date
  - 1 day before due date
  - On due date (final warning)

Notification Template

Subject: Action Required: Access Review Due [Due Date]

Hello [Reviewer Name],

You have [X] access review items pending in the [Campaign Name] campaign.

Please complete your reviews by [Due Date].

[Link to Review Dashboard]

Items remaining:
- [User 1] - [Access Description]
- [User 2] - [Access Description]
...

Thank you,
IdentityCenter

Step 7: Configure Escalation

Escalation Rules

Escalation Actions

Step 8: Review and Launch

Pre-Launch Checklist

• Scope is correctly defined
• Reviewers are properly assigned
• Timeline is reasonable
• Notifications are configured
• Escalation rules are set
• Test email is working

Preview the Campaign

1. Click Preview to see:

   • Total review items to be generated
   • Reviewer assignments
   • Estimated workload per reviewer

2. Review the numbers:

   • Are any reviewers overloaded?
   • Are there unassigned items?
   • Is the scope correct?

Launch the Campaign

1. Click Launch Campaign
2. Confirm the launch
3. Campaign status changes to Active
4. Initial notifications are sent

Post-Launch Management

Monitoring Progress

Track campaign progress on the dashboard:

Mid-Campaign Actions

Example Campaigns

Quarterly All-User Review

Name: Q1 2025 User Access Review
Type: Manager-Based
Scope: All active users
Timeline: 3 weeks
Reviewers: Direct managers
Reminders: 7, 3, 1 day before due
Escalation: Manager notification at 5 days overdue

Monthly Privileged Access Review

Name: January 2025 Admin Review
Type: Group-Based
Scope: Domain Admins, Enterprise Admins
Timeline: 1 week
Reviewers: Security Team
Reminders: 3, 1 day before due
Escalation: Auto-revoke at 3 days overdue

Annual Application Review

Name: 2025 Finance App Access Review
Type: Resource Owner
Scope: Finance Application access
Timeline: 4 weeks
Reviewers: Finance App Owner
Reminders: 14, 7, 3, 1 day before due
Escalation: Escalate to CISO at 7 days overdue

Troubleshooting

No Review Items Generated

• Verify scope filters match existing users
• Check that synced data is current
• Ensure connection is working

Reviewers Not Receiving Notifications

• Verify email configuration
• Check reviewer email addresses
• Review email logs for errors

Wrong Reviewer Assigned

• Verify manager data is synced
• Check fallback reviewer settings
• Use bulk reassignment if needed

Next Steps

• Reviewer Dashboard Guide
• Managing Active Campaigns
• Remediation Process
• Access Review Reports