Skip to main content

​
Overview

Recurring access reviews keep your RBAC model aligned with real responsibilities.
  • Weekly: Review manage scopes for critical modules.
  • Monthly: Review all admin users and dormant accounts.
  • Quarterly: Full organization-wide certification.

​
High-Risk Permissions to Prioritize

  • user:manage
  • cluster:manage
  • project:manage for shared production projects
  • Any broad role grants that bypass normal workflow

​
Evidence to Capture

  • Reviewer name and date
  • Users changed and scopes updated
  • Business justification for exceptions