Access Review

Monthly access review for compliance. Enumerates workspace members, connected integrations, service accounts, and valid API keys or tokens visible in the repository and configuration, flags inactive accounts, over-provisioned roles, and integrations with unused scopes, and routes each flagged item through an owner approval gate. Approved rejections are collected into a revocation-list ticket that records the decision and its maker. Configure the ticket integration on the Create Ticket step after importing.

Identifier

access-review

Version

1.0.0

Steps

4

Triggers

1

• access
• review
• compliance
• security
• governance
• automated

When it runs

The pipeline

The graph below is the one the workflow opens with in the builder, same steps, same layout, drawn on the same canvas. The run playing through it is a simulation; the branches and conditions are real.

1. 01
   Monthly Schedule (1st 09:00 UTC)trigger

   The event that starts the run.

2. 02
   Enumerate Access & Flag Risksagent.run

   One agent works the task with its toolkit.

3. 03
   Owner Approval: Revoke Flagged Accessapproval.gate

   Pauses the run until a human decides.

4. 04
   Create Revocation List Ticketticket.create

   Opens a ticket on the connected tracker.

The agent

Access Reviewer

Base type

Senior Developer

Temperature

0.2

Max iterations

30

Tools

4