What is the purpose of access reviews in a user account management program?

• A. Confirm Users Have Appropriate Access
• B. Automatically Grant Elevated Privileges
• C. Remove All Access After Onboarding
• D. Logins Must Occur Daily

Answer: (A)

Access reviews focus on verifying that each user’s permissions align with what they need to perform their job. They involve periodic checks where managers or data owners confirm, adjust, or revoke access and record approvals. This process keeps privileges aligned with the user’s role, helps enforce least-privilege security, reduces privilege creep, and supports audits and compliance with security policies. Automatically granting elevated privileges would undermine security, removing all access after onboarding is impractical and disruptive, and requiring daily logins doesn’t address whether the right permissions are in place.