Recertificação de acesso
A revisão periódica de acessos: abrir a campanha, decidir manter ou revogar cada um, e fechar deixando registrado o que ficou sem resposta.
The screen
The real screen, in the theme you picked above.
What you find on this screen
A portrait of the screen, read from the screen itself — it changes when the screen changes.
Available actions
Open campaignClose campaignKeepRevoke
The list shows
Person and accessStatusReason
Form fields
Competência
Prazo
Situação
Dhabertura
Dhfechamento
Observação
Start here
Recertificar não é ler a lista — é decidir, e ficar registrado
The campaign freezes the snapshot of each person's access at the moment it opens. From then on, someone needs to look at each one and say KEEP or REVOKE. The evidence the audit asks for isn't "the list was generated": it's "so-and-so looked at such-and-such's access and decided, on this date". Without the act, the campaign is a snapshot nobody signed.
How to
O retrato é o que torna a decisão possível
Each row shows WHICH access the person has, not just their name. That's on purpose: a queue showing only names would lead any reviewer to click "keep" on everything — and the evidence would record a review that didn't happen. The snapshot is frozen at opening, so deciding days later doesn't change what was being reviewed.
Rules
Revogar exige justificativa; manter, não
The asymmetry is deliberate. Keeping is the state that already exists and changes nothing. Revoking TAKES AWAY access from someone who works with it, and that person will ask why — if the answer isn't recorded here, it becomes a hallway conversation nobody can reconstruct six months later, when the auditor asks.
Fechar a campanha marca o que sobrou como NÃO RESPONDIDO
What was left undecided doesn't become "kept" at closing. Silence isn't approval, and the audit needs to see the difference between "someone looked and kept it" and "nobody looked". The number of unanswered items appears in the closing warning precisely so it doesn't go unnoticed.
Frequently asked questions
How often should this be done?
The frequency is a company parameter, in months. The house default follows market practice (quarterly or semiannual review for privileged access), but it's your tenant's security policy that decides — and it's that policy the audit will compare with the dates of the closed campaigns.
Does revoking here remove access immediately?
The decision is recorded with your name and the date. The effect on the profile is applied through the normal permissions path — this screen is the act of REVIEW and its evidence, not a shortcut that changes access without going through the Access screen, where the change is auditable the same way.
Was this article helpful?
In the same module: Platform and security38
Connected help screenAnchor screen of the detail dictionary. Does not appear in the menu.Platform accessThe record of when the platform's support team accessed your account, what they did and with what authorizati…White-spaceSee what's left to sell to those who are already customers — by cross-referencing the installed base with wha…Template itemAnchor screen of the detail dictionary (template items). Does not appear in the menu.Assistente fiscalQuatro passos para a nota sair do Tenka: estado, regime, código de segurança (CSC) e certificado A1 — com a r…ShippingControls the picking and dispatch of what was sold. Shipping confirms that the merchandise actually left: a m…Position bandAnchor screen of the detail dictionary (position bands). Does not appear in the menu.Blog — WordPress connectionWhere you connect your company's WordPress and teach the AI to write like you: the editorial line (what to ta…
Tenka Academy
Explore the AcademyStep-by-step learning paths for your industry, inside the platform.