title: Campaign Tracking & Reports category: Access Reviews tags: access-review, campaign, reports, tracking, completion, compliance priority: Normal
Campaign Tracking & Reports
Monitoring campaign progress and generating compliance reports are essential parts of the access review lifecycle. This article covers the campaign dashboard, progress tracking, reviewer management, and the reports you need for auditors.
Campaign Dashboard
Navigate to Access Reviews > Campaigns to see all campaigns. Click any campaign to open its dashboard, which provides a real-time overview of progress.
Dashboard Metrics
| Metric | Description |
|---|---|
| Overall Progress | Percentage of items that have received a decision |
| Items Reviewed | Count of items with Approve, Deny, or Delegate decisions |
| Items Remaining | Count of items still pending a decision |
| Overdue Items | Items past their reviewer's deadline |
| Completion Deadline | The campaign's hard close date |
Decision Breakdown
| Metric | Description |
|---|---|
| Approved | Number and percentage of items approved |
| Denied | Number and percentage of items denied |
| Delegated | Number and percentage of items forwarded to another reviewer |
| Pending | Number and percentage of items not yet decided |
Campaign Statuses
A campaign moves through the following statuses during its lifecycle:
| Status | Description |
|---|---|
| Draft | Campaign is configured but not yet launched. Scope, reviewers, and timeline can still be modified. |
| Active | Campaign is live. Reviewers have been notified and can begin making decisions. |
| In Progress | At least one reviewer has started making decisions. |
| Completed | All items have decisions, or the campaign has been manually closed. |
| Cancelled | Campaign was cancelled before completion. All pending items are voided. |
Status Transitions
Draft --> Active --> In Progress --> Completed
| |
└--> Cancelled └--> Cancelled
A campaign cannot return to a previous status once it moves forward. If a completed campaign needs adjustments, create a new campaign rather than reopening the old one.
Progress Tracking
By-Reviewer Progress
The campaign dashboard includes a reviewer breakdown table:
| Column | Description |
|---|---|
| Reviewer | Name of the assigned reviewer |
| Assigned | Total items assigned to this reviewer |
| Completed | Items with decisions |
| Remaining | Items still pending |
| % Complete | Completion percentage |
| Last Activity | Timestamp of the reviewer's most recent decision |
| Status | On Track, At Risk, or Overdue |
This view lets campaign managers quickly identify which reviewers need attention.
Progress Over Time
A timeline chart shows daily decision activity, helping you spot trends:
- Steady progress indicates reviewers are working consistently
- A flat line followed by a spike suggests reviewers are procrastinating
- No activity from a reviewer may indicate they have not seen the notification
Reviewer Management
Sending Reminders
From the campaign dashboard, you can send manual reminders to individual reviewers or to all reviewers who have not completed their items.
| Reminder Type | When to Use |
|---|---|
| Individual | A specific reviewer is falling behind |
| Bulk (All Incomplete) | The deadline is approaching and many reviewers have not finished |
| Escalation Notice | A reviewer is overdue and their manager needs to be notified |
Reassigning Items
If a reviewer is unavailable (on leave, departed, or overloaded), you can reassign their items:
- Open the campaign dashboard
- Click the reviewer's name
- Select Reassign Items
- Choose the new reviewer
- Provide a reason for the reassignment
The new reviewer receives a notification with the reassignment context.
Extending Deadlines
If a valid business reason exists (organizational changes, unexpected reviewer absence), you can extend the campaign deadline:
- Open the campaign dashboard
- Click Settings > Extend Deadline
- Select the new due date
- Add a justification note
Note: Deadline extensions are logged in the campaign audit trail. Auditors may ask about extensions, so always provide a clear justification.
Overdue Handling
Automatic Reminders
The ReviewReminderJob runs on a schedule and sends reminders to reviewers who are approaching or past their deadline. The reminder schedule is configured when creating the campaign.
Escalation Workflow
When items remain overdue beyond the grace period, the escalation rules take effect:
| Escalation Level | Typical Trigger | Action |
|---|---|---|
| Level 1 | 3-5 days overdue | Notify the reviewer again with urgency |
| Level 2 | 5-10 days overdue | Notify the reviewer's manager |
| Level 3 | 10+ days overdue | Reassign to a backup reviewer or auto-decide |
Auto-Decision on Close
If the campaign reaches its hard close date with items still pending, the configured default action applies:
| Default Action | Behavior |
|---|---|
| Auto-Approve | Remaining items are approved with a system note |
| Auto-Deny | Remaining items are denied with a system note |
| Leave Open | Items remain pending until manually addressed |
Security Tip: Auto-approve is convenient but undermines the purpose of the review. For sensitive access, configure auto-deny or leave items open and require manual resolution.
Completion Reports
When a campaign is completed, IdentityCenter generates a comprehensive certification report.
Final Certification Report
The certification report is the primary deliverable for auditors. It includes:
| Section | Contents |
|---|---|
| Campaign Summary | Name, scope, timeline, total items, final completion percentage |
| Decision Summary | Approve, deny, delegate counts with percentages |
| Reviewer Summary | Each reviewer's assigned count, decisions made, completion time |
| Item-Level Detail | Every review item with the user, access, decision, reviewer, timestamp, and comment |
| Escalation Log | All reminders sent, escalations triggered, and reassignments performed |
| Exceptions | Items approved despite risk flags, with reviewer justifications |
Exporting Campaign Results
Campaign results can be exported in multiple formats:
| Format | Best For |
|---|---|
| CSV | Importing into spreadsheets or other systems for analysis |
| Excel | Formatted reports with multiple worksheets (summary, details, exceptions) |
| Finalized compliance evidence for audit files |
To export:
- Open the completed campaign
- Click Export
- Select the desired format
- Choose which sections to include
- Download the file
Campaign History
Navigate to Access Reviews > Campaigns and use the status filter to view past campaigns. The history view lets you:
- Review past decisions for any user or group
- Compare results over time to identify trends (e.g., denial rate increasing each quarter)
- Track remediation to confirm that denied items were actually removed
- Demonstrate continuous compliance by showing a history of periodic reviews
Comparing Campaigns
Select two or more campaigns of similar scope to see a comparison:
| Metric | Q1 Campaign | Q2 Campaign | Trend |
|---|---|---|---|
| Total Items | 1,240 | 1,185 | Down 4% |
| Denial Rate | 8% | 12% | Up (good -- access is being cleaned up) |
| Average Review Time | 4.2 days | 2.8 days | Improved |
| Completion Rate | 94% | 99% | Improved |
Compliance Evidence
Access review campaigns generate the evidence that auditors need during SOX, HIPAA, PCI-DSS, and ISO 27001 assessments.
What Auditors Look For
| Audit Requirement | How IdentityCenter Satisfies It |
|---|---|
| Regular access review | Campaign history showing quarterly/annual reviews |
| Appropriate reviewers | Documentation that managers or resource owners made decisions |
| Timely completion | Completion percentages and timeline adherence |
| Evidence of denial | Denial rates and remediation confirmation |
| Decision rationale | Reviewer comments on approvals and denials |
| Remediation follow-through | Proof that denied access was actually revoked |
Preparing for an Audit
- Export completed campaign reports as PDFs
- Include the campaign configuration (scope, reviewers, timeline) as evidence of planning
- Show the remediation log to prove denied items were acted upon
- Prepare a summary of campaign metrics across multiple review cycles
- Have the escalation log available to show how overdue items were handled
Campaign Metrics Reference
| Metric | Description | Healthy Target |
|---|---|---|
| Completion Rate | Percentage of items reviewed | > 95% |
| On-Time Rate | Percentage completed before the deadline | > 90% |
| Denial Rate | Percentage of items denied | 5-15% (lower may indicate rubber-stamping) |
| Delegation Rate | Percentage of items delegated | < 10% |
| Average Review Time | Mean time from assignment to decision | < 3 business days |
| Escalation Rate | Percentage of items requiring escalation | < 5% |
Next Steps
- Access Reviews Overview -- Understand the access review framework
- The Review Process -- How reviewers make decisions
- Automated & Scheduled Reviews -- Set up recurring campaigns
- Creating an Access Review Campaign -- Configure and launch a new campaign
- Compliance Frameworks -- Regulatory frameworks driving review requirements
- Reports -- Other reporting capabilities in IdentityCenter