✅ Feature availability: This article discusses Access Management, which may require an upgrade or add-on. Refer to Vanta Plans and Pricing for details.
With Vanta's Access Review feature, any Vanta user with Collaborator access can hold the Application Reviewer role. This ensures that users see only the information they have permission to view while still allowing them to complete the access review.
Assigning an Application Reviewer
From the left-hand navigation panel, select Access and then select Reviews.
Click into the review itself
Select the edit icon next to the Reviewer
Search for the appropriate user and add them as the application reviewer
ℹ️ Note: We updated our terminology from system to application. For example, System Reviewer is now referred to as Application Reviewer.
Reviewing your access as a Application Reviewer
As a security best practice, we do not recommend Application Reviewers review their own account access.
We understand that each business is unique and may have its appropriate reasons for self-reviewing. If self-review is unavoidable for the user assigned as the Application Reviewer of a vendor, they will be prompted to document a reason for self-review.
Removing an Application Reviewer
Select the edit option from the Owner of an access reviewer
Select Remove assignee
The assigned Application Reviewer will receive an email notification to alert them to begin the access review.
Lock icon next to the Owner
The access review has already been completed if you see a lock icon next to the owner. An Application Reviewer can not be assigned or reassigned after the access review.