Perform Access Reviews (Contributors)

  • Last update on May 7th, 2025

Who can be a contributor?

In CoreView, a “contributor”—that is, someone tasked with performing Access Reviews—can fall into several categories:

1. Tenant admin

A tenant admin is an administrator with broad permissions to manage access and enforce policies across the entire environment.

2. CoreView operator

A CoreView operator can be any user with an assigned role in CoreView, such as a group owner, delegated admin, or someone with a custom role designed for review responsibilities. 

3. Non-CoreView user

Even individuals who do not have an existing CoreView user account can participate as contributors, as long as they belong to the company's Microsoft 365 tenant. In these cases, CoreView generates a temporary, restricted account linked to the individual’s Microsoft 365 credentials

The temporary account created for a non-CoreView user provides access only to the specific review tasks assigned. Once the assigned task is completed, the user will not have access to any content in CoreView until they are assigned to another review.

 

As a contributor—whether you’re a group owner, a designated reviewer, or a key stakeholder—you play a critical role in ensuring permissions remain up to date and aligned with your organization’s security and compliance policies.

Getting started

Step 1: Notification and access

You will receive an email notification that includes a direct link to your assigned review task. If you are new to CoreView, a temporary, restricted account will be created for you using your Microsoft 365 credentials. For existing CoreView users, simply log in as usual.

Step 2: Navigating your dashboard

After logging in, your “My task list” dashboard displays all your assigned reviews. If there is only a single review assigned to you, CoreView will take you directly to that review. Within each review, you can view start and end dates, current progress, and any relevant instructions.

Step 3: Opening and beginning the review

When ready, locate the review on your task list and click “Start review” next to the resource you are tasked to assess. You’ll then be able to examine the details for each item—such as group members, guests, or mailbox permissions—associated with the review.

Conducting an Access Review

Step 4: Review ownership

The “Release ownership” option is available only for reviews where multiple reviewers are assigned to a single item (for example, multiple group owners for a single group). 

 

When you start a review, you become the owner of that review until it is completed. If you are unable to finish, return to this menu and select “Release ownership” under the “Actions” column. This will allow other assigned reviewers to take over and complete the assignment.

If you leave a review that you have already started, you will see a “Resume review” call to action under the “Actions” column. By hovering over the call to action, an “icon will appear; click on it to view the “Release ownership” button. 

In shared reviews, certain resources may be temporarily locked to prevent conflicting changes, but you can always release or reassign them as needed to ensure smooth collaboration.

Step 5: Making access decisions

For each item under review, you can decide whether that item should retain its current access or if access should be removed by selecting the corresponding checkbox under the “Delete” column. In some cases, such as when you are reviewing Teams group members, you can also set members as group owners by clicking the corresponding checkbox. If no action is needed, you can move forward and proceed to submit the review. 

Please note that taking some actions may disable other actions; for example, if you make a user a group owner, you will not be able to delete them within the same access review. 

Your actions remain in a pending state until you submit them. If necessary, you can save your progress as a draft and return to complete the review later.

Managing Access Reviews

Step 6: Prioritizing and collaborating

If you have multiple review tasks, manage and prioritize them from your CoreView dashboard. In shared reviews, certain resources may be temporarily locked to prevent conflicting changes, but you can release or reassign them as needed to ensure smooth collaboration.

Step 7: Finalizing and recording your review

Keep an eye on the bell icon in the navigation bar for notifications or reminders related to your reviews. Once all items within a review are addressed and you’ve submitted your decisions, the review status will update to “Complete”. For your records, you can download detailed logs of your actions to assist with future audits or compliance reporting.

To execute any actions, ensure that the management session is enabled. Until the management session is active and all required actions are completed, the review status will remain “Running” rather than “Completed”.