# Perform Access Review for a Critical System

he following guide will help you perform user access reviews for a critical system.

From the security compliance standpoint, periodic user access reviews for critical systems are essential to ensure that only the required staff can access them. Refer to the[ access review](https://sprinto.freshdesk.com/support/solutions/articles/72000605751-how-to-manage-access-control-on-sprinto-) to learn more.

### Before You Begin

* Log in to the Sprinto admin portal.
* Ensure you are assigned as a critical system owner to perform an access review. By default, the InfoSec officer is designated as the system owner.

### Users Access Review for Critical System

Follow these steps to review users' access:

* From the Sprinto admin portal, navigate to **Data Library** > **Access** > **Overview**, and select the critical system you intend to review.

<figure><img src="/files/dTABstPewpu4i4yIFleC" alt="" width="563"><figcaption></figcaption></figure>

* Click on the Access Review tab and select the sprinto check "{Service provider} - access review".

<figure><img src="/files/CEu4H5xh4bwijnkvYR1P" alt="" width="563"><figcaption></figcaption></figure>

* On the User Access Review page, click Start review or **Resume review** depending on the last performed review's status.

  <figure><img src="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72108755265/original/KbCjPj8yJ66U6AiScQ5MoN7zLdgji23Q3g.png?1722408332" alt="" width="563"><figcaption></figcaption></figure>
* Review the list of users that have access to the system. Take one of the following actions against each user to define their access validity:\
  Note: Alternatively, you can click the Finish review button to mark all listed users as valid access.
  * Mark for access ok: Mark the user's access as valid
  * Mark for revoking access: Mark the user's access as invalid.
  * Mark for downgrading access: Mark the user's access for downgrading.
  * Create an access task: Generate a task related to the user's access.

    <figure><img src="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72108755538/original/3ajGFjjjpGaXHLckczTUdmzxkYJwpnkV7Q.png?1722408509" alt="" width="563"><figcaption></figcaption></figure>
* Optionally, add your remarks or create a custom task related to your performed access review as needed.

  <figure><img src="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72108755674/original/BSuLCeTbS3dzJ-zfJG9sgbIBAB-vasmZ3w.png?1722408577" alt="" width="563"><figcaption></figcaption></figure>
* If you have created a custom task, fill in the following details:\
  &#x20;\- **Task name**\
  &#x20;\- **Assigned stakeholder**\
  &#x20;\- **Task due date**\
  &#x20;\- **Task description** (optional)\
  &#x20;\- **Supporting attachment** (optional)\
  \
  The task gets created and notified to the assigned stakeholder upon review completion.
* Click Finish review to complete the access review.

  <figure><img src="https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/72108756196/original/tepkPxUFir79lyvHJzvzA8MSNwC1XEQ7sA.png?1722408868" alt="" width="563"><figcaption></figcaption></figure>

Upon completing the access review, Sprinto will update the access review check against the critical system to "Passing." And the created task

For further assistance or queries, please contact [Sprinto Support](mailto:www.support@sprinto.com).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sprinto.com/data-library/access/dashboard-actions/perform-access-review-for-a-critical-system.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
