access-review

Analyze user entitlements and account statuses across systems for security compliance.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/do360now/security-agents --skill access-review-do360now
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: access-review
Source: https://github.com/do360now/security-agents/tree/main/.claude/skills/access-review
Command: npx skills add https://github.com/do360now/security-agents --skill access-review-do360now

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill enables organizations to efficiently review and audit user entitlements, ensuring compliance with security frameworks and reducing privilege drift.

Core Features & Use Cases

  • Access Certification: Automates the process of validating user privileges against policies.
  • Orphaned Account Detection: Identifies stale or unmanaged accounts to prevent unauthorized access.
  • Role Explosion Analysis: Detects excessive or poorly managed roles that complicate access controls.
  • Segregation of Duties Checks: Finds conflicts in roles or permissions that violate security principles.
  • Use Case: Conduct quarterly reviews of all admin accounts to verify appropriateness and revoke unnecessary privileges.

Quick Start

Use the access-review skill to analyze current user entitlements and generate a compliance report.

Frequently Asked Questions about access-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit user entitlements for compliance with NIST SP 800-53?

To audit user entitlements for NIST SP 800-53 compliance, analyze current account statuses and user privileges against security policies to validate access certifications and identify privilege drift. This process generates a compliance report verifying appropriateness across systems.

What is the best way to detect orphaned accounts and prevent unauthorized access?

Detecting orphaned accounts involves analyzing user entitlements to identify stale or unmanaged accounts. This process prevents unauthorized access by flagging inactive identities for privilege revocation during routine security governance and compliance checks.

How do I perform a segregation of duties check for access controls?

Performing a segregation of duties check analyzes user roles and permissions to find conflicts that violate security principles. This prevents a single user from having excessive privileges that could lead to fraud or unauthorized system modifications.

Can I analyze role explosion to simplify privilege management?

You can analyze role explosion by reviewing user entitlements to detect excessive or poorly managed roles. This identifies unnecessary privilege assignments, helping streamline access controls and reduce complexity in identity governance workflows.

Does this access review process work for quarterly admin account audits?

Yes, the access review process works for quarterly admin account audits by automating privilege validation against security frameworks. It verifies the appropriateness of administrative access and flags unnecessary privileges for revocation to maintain compliance.

How do I reduce privilege drift across multiple systems?

Reduce privilege drift by automating access certification to validate user entitlements against established policies. Analyzing account statuses across systems detects excessive permissions and stale accounts, ensuring continuous compliance with CIS Controls.