Docs
EnterpriseAccess reviews
Access reviews turn your audit log into least-privilege recommendations — concrete suggestions to trim access that isn't being used, so grants stay tight without a manual audit.
What it recommends
- Stale members — people who haven't taken any action in a long while; review whether they still need access.
- Idle privileges — a member who holds mutating permissions but has only ever read; consider a lighter role.
- Empty roles — custom roles with no members, safe to retire.
Using it
Open Access reviews from the sidebar. Each finding explains the evidence (who, and what they have vs. what they've used) so you can decide. The recommendations are advisory — changing a member's role or removing access happens in your team / roles settings, as always.
Recommendations are computed from real activity, not guesses — a "trim this" only appears when the usage history backs it up.
Permissions
user.read
Access reviews need user.read and are hidden until an administrator enables them for your workspace. For point-in-time attestations and exportable evidence, see Compliance evidence.