Filters and Bulk Actions

Using filters to apply actions to several rows at a time, across many pages of results.

Overview

Use bulk actions in the review interface to update many rows at once with a note, decision, or sign-off state. You can also use bulk actions to change reviewer assignments for a group of results.

Filtering the reviewer interface based on specific criteria and acting on rows in bulk is a recommended workflow for working on large access reviews.

For example, bulk actions can:

• Update all rows that already have a decision, note, or an assigned reviewer.

• Reassign reviewers based on an attribute such as department, region, or manager.

• Approve or reject access for specific permissions.

This document describes a recommended workflow for acting on all results that match the current filter.

Filter access review rows

Use filters to apply group actions based on an attribute, decision, or other column for a result row:

1. Click Filters at the top of the review interface.

   

   Applying a filter on row decision
2. Click Show More to reveal all possible columns.

3. Find an attribute to filter on and click on it.

   Filterable attributes are grouped with a prefix to indicate the element of the access relationship they apply to.

   • Source: Attributes on the entity whose access is under review (e.g., user name or group type).

   • Destination: Attributes on the related entity.

   • Intermediate: Attributes for a waypoint entity connecting the source and destination. This option is enabled at the configuration level by specifying a single Relationship entity type.

   • Summary Entities: The name, ID, or entity type of any entity that appears in the path summary. A path summary can be enabled at the configuration level to show a sequence of several entities connecting the source and destination, such as groups, roles, or other resources.

   • Metadata: Review-specific information such as the decision, notes, and assigned reviewers.

4. Operator: For text strings, options are CONTAINS. EQUALS, NOT EQUALS, STARTS WITH, and ENDS WITH. When filtering on dates, you will instead pick a time range.

5. Parameter: Enter the text to match.

6. (Optional) Add Another to specify more matchers. Strings are grouped with an "OR" statement, for example, "Destination Region" EQUALS "East" OR EQUALS "WEST.

7. (Optional) Click another property on the Filters menu to refine your search with additional attributes.

8. Click Apply to filter the reviewer interfaces based on your selection.

   

   Filtering by intermediate entity name.

Notes:

• The filter string can be empty, for example, User Department EQUALS (empty value).

• To treat a numeric value as a string (such as to match numbers in user names), enclose the numbers in quotes (Name, CONTAINS, "00000"). Otherwise, the number will be treated as an integer.

• You can include leading or trailing spaces in the search text by enclosing the filter string in quotes, for example, Resource Name = " Bucket "

Bulk actions

Possible actions are Approve, Reject, Reassign Reviewers, or Add Note. To sign off, click the button at the top right.

To apply an action to rows matching a filter:

1. Customize and apply a filter to show just the results you want to act on.

   

   Add filter.
2. Choose the rows with the checkboxes on the left.

3. At the top of the screen, click on an action to apply.

   

   Bulk actions.

Apply a bulk action to all rows across all pages

To act on all rows on all pages in the review, instead of just the current page:

1. Tick the multi-select box at the top left to select all rows on the page.

2. Click Select all rows above the table of results.

   

   Select all rows.
3. Choose an action to apply and confirm your decision.