# Access Audit
URL: https://docs.autociso.io/console/access/access-audit/
Description: Access Audit is where you import access snapshots for AI-powered analysis and keep a complete, auditable record of every import.

*This is the help text the console shows in the help panel on this page.*

Access Audit is where you import access snapshots for AI-powered analysis and keep a complete, auditable record of every import. It is the primary source of evidence for SOC 2, ISO 27001, and similar compliance frameworks. You find it in the sidebar under Access & Risk > **Access Audit**.

### Two Tabs
**Access Import** — Every import you have submitted. Four summary cards (**All**, **Failed**, **Unidentified**, **Manual**) show counts; click a card to filter the list. The **All** list can also be filtered by asset and by status. Click any row to open Audit Details.

**Review Queue** — [Detections the AI could not match with confidence](https://docs.autociso.io/console/access/review-queue/). Visible to [owners and managers only](https://docs.autociso.io/getting-started/roles-and-permissions/); see the Review Queue help for details.

### Running a New Import
1. Click **New Import**.
2. *(Optional)* Select the asset being audited — or leave it as **Auto-detect** to let the AI identify it from the file content.
3. Upload a CSV or Excel export, a PDF report, or a screenshot from the target system, up to 5 MB.
4. Click **Analyze & Import**. The import moves to **Pending**, then to **Completed** or **Action Required** once processing finishes.

### Import Statuses
| Status | Meaning |
|--------|---------|
| **Completed** | Analysis finished; anomaly count is final. |
| **Pending** | File is queued or actively being processed. If it gets stuck, the **x** button on the row cancels it. |
| **Action Required** | AI could not confidently resolve some identities. Open the **Review Queue** tab to make manual decisions. |
| **Unidentified Asset** | The capture could not be matched to an asset. Resolve it from the **Unidentified** card. |
| **Failed** | Processing error — check the error message in Audit Details and re-upload if needed. |
| **Cancelled** | The import was cancelled before it finished. |

### Unidentified Imports
On the **Unidentified** card, click the tag button on a row (**Assign Asset & Reprocess**), choose the correct asset, and analysis restarts. To fix several at once, select rows and use **Assign Asset to Selected Audits**.

### Audit Details
Click any row to open the details panel, which shows:
- The asset, date, number of anomalies, and how many detected users were matched to employees.
- A **Detected Anomalies** tab (ghost account, terminated user with active access, unrecognized identity, etc.).
- An **Employees** tab listing each name found in the file and the employee it was matched to. Use **[Correct match](https://docs.autociso.io/product/access/correct-employee-match/)** to fix a misrecognised employee.
- **Download Source File** and **Download PDF Report** buttons for sharing with auditors (the report is available once processing is finished).
- A **Go to Review Queue** button when manual identity resolution is required (owners and managers).

### Adding Manual Access Records
Click **[Add Manually](https://docs.autociso.io/product/access/manual-access-evidence/)** when an access grant exists but cannot be captured via file upload. Required fields: **Employee**, **Asset**, and **Role in Asset**; you can also set **Identity Type** (Human or Service Account) and attach optional evidence (PDF, image, CSV or XLSX, up to 10 MB). Click **Add Access**. Records appear on the **Manual** card (switch between humans and service accounts) and feed into the [access inventory](https://docs.autociso.io/console/access/inventory/) used by [review campaigns](https://docs.autociso.io/console/iso/access-reviews/).

## Fields

### Asset (New Audit)

The asset whose user list you are auditing. Leave as **Auto-detect** to let the AI identify the asset from the file content — useful when submitting screenshots directly from the browser extension.

If you know the asset, selecting it explicitly improves matching accuracy and speeds up processing.

### Audit File

The access snapshot to analyze. Supported formats:
- **CSV / Excel** — a user-list export from the target system.
- **PDF** — an access report or permissions summary.
- **Screenshot (PNG, JPG)** — a capture of the user management screen.

Maximum file size: **5 MB**. The file is stored and linked to the audit record; you can re-download it from Audit Details at any time.

### Employee (Manual Access)

The employee who holds the access being recorded. Search by name or email address. The employee must already exist in the directory — add them on the **Employees** page first if needed.

### Asset (Manual Access)

The asset the employee has access to. Must be an existing asset from the Asset Inventory.

### Role (Manual Access)

The permission level or role the employee holds in this asset.

**Examples:** `Admin`, `Viewer`, `Editor`, `Read-Only`, `Owner`.

This value appears in access review campaigns and helps reviewers understand the scope of access being certified.

### Identity Type (Manual Access)

Classifies the access record as belonging to a human user or a non-human service account.

- **Human** — a named employee or contractor.
- **Service Account** — a bot, automation pipeline, or API integration.

Service accounts may trigger different review policies and rotation requirements.