Row Grouping for Access Reviews

Review access in structured, collapsible sections to streamline review workflows and enables bulk actions.

Early Access: Row grouping is currently provided as an optional feature. Please contact our support team to enable this capability for your Veza tenant.

Overview

Row grouping enables reviewers to organize and consolidate their review data into structured, collapsible sections. This makes it easier to focus on key insights, manage large sets of access data, and take quick actions based on user assignments, risk levels, or changes in access.

With this option, you can group your review results in multiple ways, including by:

• User: View all access associated with a specific user in one expandable section.

• Source: Group rows by the entity granting access (e.g., unique users, roles, or groups).

• Destination: Group access by its target (e.g., applications, roles, or resources).

• Risk Level: Organize access by risk level—Critical, High, Medium, Low, or None.

• Status: Separate changed vs. unchanged rows based on past review decisions.

For example, in this access review of Okta Users to Snowflake Databases, enabling the Group By > User option shows expandable groups of rows for each unique user in the results:

Reviewer interface with row grouping enabled.

The “Group By” option provides a powerful way to consolidate assigned work into collapsible sections, organized by source ID, destination ID, or risk levels. Rows groupings can also be used to sort changed and unchanged rows, if there is historic decision data for the review.

Using the Group By option

To enable row grouping for an access review:

1. Click on an active review to open the results in the reviewer’s interface.

2. Click + Group By above the table to choose an option:

   • Source: Group by source entity ID (this could be each unique user, role, or group under review)

   • Destination: Group by the destination entity ID (e.g., individual roles, apps, or resources users are assigned to or have permissions on)

   • Risk Level: Group results by risk level (Critical, High, Medium, Low, or None).

   • Status: Group rows that are changed or unchanged since the last review using the same configuration.

3. Expand or collapse each group of rows to focus on different components of the access review.

4. Use group options to apply bulk decisions quickly:

   • Approve or reject rows multiple rows at once.

   • Apply actions, such as signing off, adding notes, or reassigning reviews.

This feature is designed to streamline your review workflow, reducing manual effort and ensuring faster, more effective decision-making.