Configuring access reviews and campaigns

Campaigns in BalkanID are organized groups of access reviews designed for audit, compliance, or risk remediation purposes. As a Risk Manager or Administrator, you can create, publish, track, and report on these campaigns, gaining crucial oversight into your organization's access posture.

A campaign can progress through several states, providing clear visibility into its lifecycle:

• Draft: The campaign has been created but is not yet active. It's in a preparatory phase, awaiting finalization and publication.

• In Progress: The campaign has officially started and is actively awaiting completion before its due date. A campaign remains "In Progress" even if all individual reviews within it are completed, until a Risk Manager or Administrator manually marks it as "Completed."

• Overdue: The campaign has passed its designated due date. A campaign can still be "Overdue" even if all its access reviews are 100% complete if the end date of the campaign is in the past and it has not yet been manually marked "Completed" by a Risk Manager or Administrator. This status indicates that outstanding reviews need immediate attention or that the campaign requires finalization.

• Completed: All access reviews within the campaign have been finalized (either approved or denied), AND the campaign has been manually marked as "Complete" by a Risk Manager or Administrator. It's important to note that all associated notifications and fulfillment actions (such as de-provisioning or ticket creation for denied access reviews) will occur only when the campaign is explicitly marked "Completed."

• Aborted: The campaign has been stopped prematurely before all reviews could be completed, usually by an Administrator or Risk Manager.

Note: Only users with the "Risk Manager" or "Administrator" role can create and manage campaigns. For guidance on enabling provisioning and de-provisioning options, please refer to our "Fulfillment Options" article. (Only Administrators can set Fulfillment Options).

---

In this section, we will cover:

1. Creating campaigns: Learn the steps to initiate new access review campaigns.

2. Configuring integration-specific multi-level review settings: Tailor multi-level review processes for specific integrated applications.

3. Configuring multi-level review settings in campaigns: Set up sequential approval workflows for thorough reviews.

4. Creating recurring campaigns: Automate regular access reviews for continuous compliance.

5. Configuring campaign escalation: Define rules for automatically escalating reviews when timely action isn't taken.

6. Reviewer insight escalation for campaigns: Understand how to leverage insights to prompt reviewers to action.