Access recertification with owner and exception handling
Ends with live permission reconciliation rather than treating owner attestation as completed revocation. Original worked design example; adapt responsibilities, thresholds and assumptions to your system.
Rendering…
What this template contains
- Diagram type
- Flowchart
- Source
- 18 lines
Make it your own.
flowchart TD
I[Snapshot accounts and entitlements] --> O[Resolve accountable resource owner]
O --> F{Owner identified?}
F -->|No| E[Escalate orphaned resource]
F -->|Yes| R[Request evidence-based access review]
E --> R
R --> D{Access still required?}
D -->|No| V[Revoke access and confirm completion]
D -->|Yes| L{Least-privilege scope?}
L -->|No| M[Reduce entitlement]
L -->|Yes| A[Attest with evidence]
M --> A
A --> X{Temporary exception needed?}
X -->|Yes| T[Record expiry and compensating control]
X -->|No| C[Close review item]
T --> C
V --> C
C --> Q[Reconcile decisions against live permissions]