Access reviews is in beta and available to selected organizations. To request access, contact your Ravenna representative, or reach out to the Ravenna team on Slack or through the in-app chat. Testing it? See the beta tester guide.
Only organization admins can create, start, end, cancel, and export access reviews. Reviewers see only the reviews and the access assigned to them. See Complete an access review.
How an access review works
1
Create a draft
Name the review, choose an owner, choose who reviews, set a due date, and select the applications in scope.
2
Start the review
Ravenna takes a snapshot of who has access to each application at each access level, and assigns every person’s access to a reviewer.
3
Reviewers decide
Each reviewer approves or denies the access assigned to them, one application at a time.
4
Act on access changes
Every denial appears on the Access changes tab. You revoke the access, keep it with a reason, or mark it removed in your identity provider.
5
End and export
End the review when reviewers are done, then export the decisions for your records.
Review statuses
View reviews
Open Reviews in the sidebar. Organization admins see every review in the organization, with counts of total, in progress, and completed reviews. Each row shows the review’s name, status, owner, type (Adhoc, Scheduled, or Recurring), applications, and due date. Click a review to open it.- Search by name.
- Filter by status, owner, application, due date, start date, or created date.
- Group by status, owner, or type.
- Sort by created date, name, or due date.
- Complete ends every selected review, the same as ending a review. It’s available when every selected review is In progress.
- Cancel cancels every selected review, the same as canceling a review.
Create a review
1
Start a new review
In Reviews, click New. If your organization has no reviews yet, click New review.
2
Name and describe it
Enter a name, such as Q4 2026 SOC 2 review, and an optional description.
3
Set the scope
- Owner: the person responsible for the review. It defaults to you and must be an active member of your organization. When no one else qualifies to review someone’s access, the owner reviews it.
- Reviewers: who decides on each person’s access. Choose Manager, App owner, or Manager, then app owner.
4
Choose when it runs
In Date and time, choose a type:
- Adhoc: you start the review yourself. Optionally set a Due date for reviewers.
- Scheduled: the review starts on its own at the Start date and time you choose, in your time zone. Optionally set a Due date after the start.
- Recurring: the review repeats on its own. Choose a Frequency (Every month, Every quarter, or Every year), when the First run starts, and the Time to review each run (7, 14, 30, 60, or 90 days). Each run is due that many days after it starts.
5
Select applications
Search the list and select each application whose access you want reviewed. The list shows applications that aren’t archived and have at least one access level that isn’t archived.Each application shows its status and how many entitlements it has, counted the same way a review’s snapshot counts them. Filter the list by application status.
How Ravenna picks each reviewer
When the review starts, Ravenna assigns each person’s access to the first eligible reviewer from the source you chose:
A reviewer must be an active member of your organization and is never the person whose access is being reviewed. When no one qualifies, the review’s owner reviews that access.
Learn more about setting application owners
Start a review
Open the draft and click Start review, then confirm. For a scheduled or recurring review, click Schedule review instead, then confirm. The review moves to Scheduled and starts on its own at its start time. Until then:- Edit any setting. If you change the start time, click Reschedule to save it.
- Click Start now to start it right away.
- Choose Unschedule from the More actions menu to move it back to Draft.
- Access granted through a Ravenna access request that’s currently active.
- Access people hold through an identity provider group linked to one of the application’s access levels.
Recurring reviews
Each run of a recurring review is its own review. When a run starts, Ravenna creates the next run as a new Scheduled review with the same settings, one frequency period later. If nobody has access when a run is due to start, that run moves to its next date. Each run needs an owner who’s an active member of your organization. To stop the series, cancel or unschedule the next scheduled run.Track progress
Open an in-progress review to see its owner, start date, due date, and these counts, which stay visible on every tab:- Applications in scope: applications in the review.
- Entitlements in scope: rows in the review, one for each person and access level.
- Entitlements reviewed: rows with a decision.
- Entitlements changed: rows reviewers denied.
Search, filter, and sort each tab. If you’re also a reviewer on the review, you can approve or deny your own rows, one at a time or in bulk, as described in Complete an access review.
Act on access changes
Every row a reviewer denies appears on the Access changes tab as Awaiting action. Each row shows the person, application, access level, who denied it, and when. For each denial, choose one of these:
Each action records who took it and when. You can act on denials while the review is in progress and after you end it.
Learn more about revoking entitlements
End a review
When reviewers are done, open the review and click End review, then confirm. The review moves to Completed. Reviewers can no longer record decisions, and you can still act on access changes.Export decisions
Open a review and click Export. Ravenna downloads a CSV named after the review and today’s date, with one row for each person and access level:Duplicate or cancel a review
From the More actions menu on a review, or the row menu in Reviews:- Duplicate creates a new draft with the same name, description, reviewers, applications, frequency, and time to review, owned by you.
- Cancel review stops a draft, scheduled, or in-progress review. Reviewers stop seeing it and decisions stop. Canceling is permanent.