Acting on Entitlement Records

Attestation work items contain the user entitlement records requiring review. Entitlement records provide information about user access privileges, assigned resources, and policy violations.

The following are possible responses to an attestation request:

• Approve. Attests that the entitlement is appropriate as of the date recorded in the entitlement record.

• Reject. The entitlement record indicates possible discrepancies that cannot be currently validated or remediated.

• Rescan. Requests a rescan to re-evaluate the user entitlement.

• Forward. Enables you to specify another recipient for review.

• Abstain. Attestation for this record is not appropriate, and a more appropriate attestor is not known. The attestation work item is forwarded to the Review Process Owner. This option is available only if a Review Process Owner has been defined in the Access Review task.

If an attestor does not respond to a request by taking one of these actions before the specified escalation timeout period, notice is sent to the next attestor in the escalation chain. The notification process continues until a response is logged.

Attestation status can be monitored from the Compliance -> Access Reviews tab.