User Access Review

A user access review is a periodic check of who can sign in to a website, CMS, hosting account, or connected service and what each person is allowed to do. A small service business may discover that a former contractor still has administrator access long after a project ended. Reviews can remove unused accounts, correct excessive permissions, and confirm that authorized users still need their roles. This is different from two-factor authentication, which helps protect the login process. Access reviews support the principle of least privilege, although exact roles and review tools vary by platform. Keep a record of important permission changes.