Back to Access Reviews
Access Reviews

Campaign Tracking & Reports

34 views

title: Campaign Tracking & Reports category: Access Reviews tags: access-review, campaign, reports, tracking, completion, compliance priority: Normal

Campaign Tracking & Reports

Monitoring campaign progress and generating compliance reports are essential parts of the access review lifecycle. This article covers the campaign dashboard, progress tracking, reviewer management, and the reports you need for auditors.

Campaign Dashboard

Navigate to Access Reviews > Campaigns to see all campaigns. Click any campaign to open its dashboard, which provides a real-time overview of progress.

Dashboard Metrics

Metric Description
Overall Progress Percentage of items that have received a decision
Items Reviewed Count of items with Approve, Deny, or Delegate decisions
Items Remaining Count of items still pending a decision
Overdue Items Items past their reviewer's deadline
Completion Deadline The campaign's hard close date

Decision Breakdown

Metric Description
Approved Number and percentage of items approved
Denied Number and percentage of items denied
Delegated Number and percentage of items forwarded to another reviewer
Pending Number and percentage of items not yet decided

Campaign Statuses

A campaign moves through the following statuses during its lifecycle:

Status Description
Draft Campaign is configured but not yet launched. Scope, reviewers, and timeline can still be modified.
Active Campaign is live. Reviewers have been notified and can begin making decisions.
In Progress At least one reviewer has started making decisions.
Completed All items have decisions, or the campaign has been manually closed.
Cancelled Campaign was cancelled before completion. All pending items are voided.

Status Transitions

Draft --> Active --> In Progress --> Completed
  |                      |
  └--> Cancelled         └--> Cancelled

A campaign cannot return to a previous status once it moves forward. If a completed campaign needs adjustments, create a new campaign rather than reopening the old one.

Progress Tracking

By-Reviewer Progress

The campaign dashboard includes a reviewer breakdown table:

Column Description
Reviewer Name of the assigned reviewer
Assigned Total items assigned to this reviewer
Completed Items with decisions
Remaining Items still pending
% Complete Completion percentage
Last Activity Timestamp of the reviewer's most recent decision
Status On Track, At Risk, or Overdue

This view lets campaign managers quickly identify which reviewers need attention.

Progress Over Time

A timeline chart shows daily decision activity, helping you spot trends:

  • Steady progress indicates reviewers are working consistently
  • A flat line followed by a spike suggests reviewers are procrastinating
  • No activity from a reviewer may indicate they have not seen the notification

Reviewer Management

Sending Reminders

From the campaign dashboard, you can send manual reminders to individual reviewers or to all reviewers who have not completed their items.

Reminder Type When to Use
Individual A specific reviewer is falling behind
Bulk (All Incomplete) The deadline is approaching and many reviewers have not finished
Escalation Notice A reviewer is overdue and their manager needs to be notified

Reassigning Items

If a reviewer is unavailable (on leave, departed, or overloaded), you can reassign their items:

  1. Open the campaign dashboard
  2. Click the reviewer's name
  3. Select Reassign Items
  4. Choose the new reviewer
  5. Provide a reason for the reassignment

The new reviewer receives a notification with the reassignment context.

Extending Deadlines

If a valid business reason exists (organizational changes, unexpected reviewer absence), you can extend the campaign deadline:

  1. Open the campaign dashboard
  2. Click Settings > Extend Deadline
  3. Select the new due date
  4. Add a justification note

Note: Deadline extensions are logged in the campaign audit trail. Auditors may ask about extensions, so always provide a clear justification.

Overdue Handling

Automatic Reminders

The ReviewReminderJob runs on a schedule and sends reminders to reviewers who are approaching or past their deadline. The reminder schedule is configured when creating the campaign.

Escalation Workflow

When items remain overdue beyond the grace period, the escalation rules take effect:

Escalation Level Typical Trigger Action
Level 1 3-5 days overdue Notify the reviewer again with urgency
Level 2 5-10 days overdue Notify the reviewer's manager
Level 3 10+ days overdue Reassign to a backup reviewer or auto-decide

Auto-Decision on Close

If the campaign reaches its hard close date with items still pending, the configured default action applies:

Default Action Behavior
Auto-Approve Remaining items are approved with a system note
Auto-Deny Remaining items are denied with a system note
Leave Open Items remain pending until manually addressed

Security Tip: Auto-approve is convenient but undermines the purpose of the review. For sensitive access, configure auto-deny or leave items open and require manual resolution.

Completion Reports

When a campaign is completed, IdentityCenter generates a comprehensive certification report.

Final Certification Report

The certification report is the primary deliverable for auditors. It includes:

Section Contents
Campaign Summary Name, scope, timeline, total items, final completion percentage
Decision Summary Approve, deny, delegate counts with percentages
Reviewer Summary Each reviewer's assigned count, decisions made, completion time
Item-Level Detail Every review item with the user, access, decision, reviewer, timestamp, and comment
Escalation Log All reminders sent, escalations triggered, and reassignments performed
Exceptions Items approved despite risk flags, with reviewer justifications

Exporting Campaign Results

Campaign results can be exported in multiple formats:

Format Best For
CSV Importing into spreadsheets or other systems for analysis
Excel Formatted reports with multiple worksheets (summary, details, exceptions)
PDF Finalized compliance evidence for audit files

To export:

  1. Open the completed campaign
  2. Click Export
  3. Select the desired format
  4. Choose which sections to include
  5. Download the file

Campaign History

Navigate to Access Reviews > Campaigns and use the status filter to view past campaigns. The history view lets you:

  • Review past decisions for any user or group
  • Compare results over time to identify trends (e.g., denial rate increasing each quarter)
  • Track remediation to confirm that denied items were actually removed
  • Demonstrate continuous compliance by showing a history of periodic reviews

Comparing Campaigns

Select two or more campaigns of similar scope to see a comparison:

Metric Q1 Campaign Q2 Campaign Trend
Total Items 1,240 1,185 Down 4%
Denial Rate 8% 12% Up (good -- access is being cleaned up)
Average Review Time 4.2 days 2.8 days Improved
Completion Rate 94% 99% Improved

Compliance Evidence

Access review campaigns generate the evidence that auditors need during SOX, HIPAA, PCI-DSS, and ISO 27001 assessments.

What Auditors Look For

Audit Requirement How IdentityCenter Satisfies It
Regular access review Campaign history showing quarterly/annual reviews
Appropriate reviewers Documentation that managers or resource owners made decisions
Timely completion Completion percentages and timeline adherence
Evidence of denial Denial rates and remediation confirmation
Decision rationale Reviewer comments on approvals and denials
Remediation follow-through Proof that denied access was actually revoked

Preparing for an Audit

  1. Export completed campaign reports as PDFs
  2. Include the campaign configuration (scope, reviewers, timeline) as evidence of planning
  3. Show the remediation log to prove denied items were acted upon
  4. Prepare a summary of campaign metrics across multiple review cycles
  5. Have the escalation log available to show how overdue items were handled

Campaign Metrics Reference

Metric Description Healthy Target
Completion Rate Percentage of items reviewed > 95%
On-Time Rate Percentage completed before the deadline > 90%
Denial Rate Percentage of items denied 5-15% (lower may indicate rubber-stamping)
Delegation Rate Percentage of items delegated < 10%
Average Review Time Mean time from assignment to decision < 3 business days
Escalation Rate Percentage of items requiring escalation < 5%

Next Steps

Tags: access-review campaign reports tracking completion compliance

Was this article helpful?

Related Articles

Creating an Access Review Campaign
Access Reviews Overview
Automated & Scheduled Reviews