Skip to content
English - United States
Get Support Now
Contact us
  • There are no suggestions because the search field is empty.

Access Reviews

Learn how to create, manage, and use Access Reviews

Published Date: June 16, 2026 | Last Updated: June 17, 2026

Overview

Access Reviews allow Administrators to run structured certification campaigns that verify whether users’ current access is appropriate. Each campaign is scoped to one or more teams and assigned to a designated reviewer — typically a team manager or department lead — who logs in to Tello IAM, reviews each team member’s permissions, and approves or flags anything that needs attention.

Access Reviews can currently be scoped by team. Review by integration is planned for a future release.

Access Review roles

Three administrative roles control who can create and participate in Access Reviews. These roles are assigned when inviting or editing an administrator account and do not grant access to any other area of the platform.

Role Description
Access Review Admin Can administer all access review campaigns across the tenant.
Access Review Creator Can create access reviews and manage their own campaigns.
Access Review User Can participate in assigned access reviews. Intended for reviewers such as team managers who need to log in to Tello IAM to complete a review without access to administrative functions.

Note: Full Administrators have access to all Access Review functions by default.

Create an access review

New access reviews are saved as a Draft. No notifications are sent to reviewers until the review is explicitly sent.

  1. Navigate to Access Reviews in the left navigation.
  2. Select + New Access Review.
  3. Select Review by team as the scope.
  4. Enter a name in the Name field.
  5. Set the Due date.
  6. Under Teams to review, select + Add a team and choose the teams to include. Each team displays a suggested reviewer. To change the reviewer, select the reviewer dropdown and choose a different user.
  7. Select Create review. The review is saved as a Draft and the detail page opens.

Note: If a reviewer does not have a Tello IAM account, a No Tello IAM account warning will appear on the review detail page. Tello IAM can automatically send the reviewer an account invitation when the review is sent.

Edit a draft review

While a review is in Draft status it can be modified before sending. Select Edit draft on the review detail page to change the name, due date, teams, or reviewer assignments. Select Save changes to apply updates.

Send an access review

Sending a review changes its status from Draft to Active and notifies the assigned reviewers.

  1. From the review detail page, select Send review.
  2. The Send Access Review dialog displays the reviewers who will be notified. Any reviewer without a Tello IAM account is shown with a Will be invited to Tello IAM badge.
  3. Review the pre-populated notification message. The message can be edited before sending.
  4. To automatically send an account invitation to any reviewer who does not yet have a Tello IAM account, confirm the Invite reviewers to Tello IAM as needed toggle is enabled.
  5. Select Send Email to send notifications and activate the review.

Monitor review progress

Once a review is Active, the review detail page displays a live summary of progress across three panels.

  • The Review Status panel shows percentage complete and a breakdown of users by status: Completed, Needs action, and Pending.
  • The Reviewers Remaining panel shows how many assigned reviewers have not yet submitted.
  • The Due panel shows the days remaining and due date.

The reviewer table below the summary panels lists each reviewer with their assigned user count, a progress indicator, and a current status. Tabs above the table filter the list by Needs action, Completed, and Pending reviewer.

Selecting Open › on any reviewer row opens that reviewer’s full assignment. The detail view shows each assigned user on the left and their access on the right, organized either by Role Template (By Role) or by integration (By System). Each user’s record indicates whether the reviewer has submitted a decision.

Send a reminder

To follow up with reviewers who have not yet completed their assignment, select Send reminder from the review detail page. The Send Access Review Reminder dialog works identically to the initial send: confirm which reviewers to notify, edit the message if needed, and select Send Reminder.

Complete a review

When the review period ends, select Complete review from the review detail page to close the campaign and set its status to Completed. Completed reviews remain visible in the Access Reviews list and can be filtered using the Completed tab.

Related articles

  • Managing Administrators — assign and update administrative roles including Access Review roles
  • Teams — create and manage the teams used as the scope for access reviews


tello-logo-color-1 Seasoft Security Solutions LLC | TelloIAM