Identity Access Reviews That Actually Revoke Access
Reviews that end in revoked memberships — not a signed spreadsheet.
Access reviews only reduce risk when revoked access is removed from the directory. Rivitan runs campaigns on AD and Entra groups, routes decisions to owners, lets auditors verify, previews removals, then applies and logs every change.
The problem
Certification campaigns often produce PDF evidence while memberships stay unchanged. Managers click Approve because the UI is noisy, privileged groups never shrink, and the next audit finds the same stale access.
Outcomes
- Campaigns scoped to the groups that matter
- Owner keep / revoke / flag with context
- Optional auditor step before anything touches the directory
- Dry-run preview, then apply into AD and Entra with an audit log
How Rivitan helps
Closed-loop remediation
Revoke is not a checkbox on a report — it can remove the membership in Active Directory and Entra ID after preview.
Hybrid Microsoft coverage
Review the same logical access whether it lives in on-prem groups, Entra groups, or both.
Audit-ready evidence
Who decided, what was previewed, and what was applied — retained for SOX, SOC 2, and internal audit.
FAQs
Teams often use the terms interchangeably. Certification emphasizes attesting that access is still appropriate. A useful review also remediates — removing access that is no longer needed. Rivitan is built for reviews that can revoke.
Talk about access reviews
Bring your AD + Entra reality — we will map a pilot that produces evidence, not slideware.