Access Audit
This is the help text the console shows in the help panel on this page.
Access Audit is where you import access snapshots for AI-powered analysis and keep a complete, auditable record of every import. It is the primary source of evidence for SOC 2, ISO 27001, and similar compliance frameworks. You find it in the sidebar under Access & Risk > Access Audit.
Two Tabs
Access Import — Every import you have submitted. Four summary cards (All, Failed, Unidentified, Manual) show counts; click a card to filter the list. The All list can also be filtered by asset and by status. Click any row to open Audit Details.
Review Queue — Detections the AI could not match with confidence. Visible to owners and managers only; see the Review Queue help for details.
Running a New Import
- Click New Import.
- (Optional) Select the asset being audited — or leave it as Auto-detect to let the AI identify it from the file content.
- Upload a CSV or Excel export, a PDF report, or a screenshot from the target system, up to 5 MB.
- Click Analyze & Import. The import moves to Pending, then to Completed or Action Required once processing finishes.
Import Statuses
| Status | Meaning |
|---|---|
| Completed | Analysis finished; anomaly count is final. |
| Pending | File is queued or actively being processed. If it gets stuck, the x button on the row cancels it. |
| Action Required | AI could not confidently resolve some identities. Open the Review Queue tab to make manual decisions. |
| Unidentified Asset | The capture could not be matched to an asset. Resolve it from the Unidentified card. |
| Failed | Processing error — check the error message in Audit Details and re-upload if needed. |
| Cancelled | The import was cancelled before it finished. |
Unidentified Imports
On the Unidentified card, click the tag button on a row (Assign Asset & Reprocess), choose the correct asset, and analysis restarts. To fix several at once, select rows and use Assign Asset to Selected Audits.
Audit Details
Click any row to open the details panel, which shows:
- The asset, date, number of anomalies, and how many detected users were matched to employees.
- A Detected Anomalies tab (ghost account, terminated user with active access, unrecognized identity, etc.).
- An Employees tab listing each name found in the file and the employee it was matched to. Use Correct match to fix a misrecognised employee.
- Download Source File and Download PDF Report buttons for sharing with auditors (the report is available once processing is finished).
- A Go to Review Queue button when manual identity resolution is required (owners and managers).
Adding Manual Access Records
Click Add Manually when an access grant exists but cannot be captured via file upload. Required fields: Employee, Asset, and Role in Asset; you can also set Identity Type (Human or Service Account) and attach optional evidence (PDF, image, CSV or XLSX, up to 10 MB). Click Add Access. Records appear on the Manual card (switch between humans and service accounts) and feed into the access inventory used by review campaigns.
Fields
Asset (New Audit)
The asset whose user list you are auditing. Leave as Auto-detect to let the AI identify the asset from the file content — useful when submitting screenshots directly from the browser extension.
If you know the asset, selecting it explicitly improves matching accuracy and speeds up processing.
Audit File
The access snapshot to analyze. Supported formats:
- CSV / Excel — a user-list export from the target system.
- PDF — an access report or permissions summary.
- Screenshot (PNG, JPG) — a capture of the user management screen.
Maximum file size: 5 MB. The file is stored and linked to the audit record; you can re-download it from Audit Details at any time.
Employee (Manual Access)
The employee who holds the access being recorded. Search by name or email address. The employee must already exist in the directory — add them on the Employees page first if needed.
Asset (Manual Access)
The asset the employee has access to. Must be an existing asset from the Asset Inventory.
Role (Manual Access)
The permission level or role the employee holds in this asset.
Examples: Admin, Viewer, Editor, Read-Only, Owner.
This value appears in access review campaigns and helps reviewers understand the scope of access being certified.
Identity Type (Manual Access)
Classifies the access record as belonging to a human user or a non-human service account.
- Human — a named employee or contractor.
- Service Account — a bot, automation pipeline, or API integration.
Service accounts may trigger different review policies and rotation requirements.
Was this page helpful?