Regular access reviews, built in
Give access with an end date and run regular access reviews; nobody approves their own access.
LiveWhat does Access reviews & grant expiry do? Run regular access reviews inside Kinnow, instead of in spreadsheets and email.
How it works
Access can be given with an expiry date; once it lapses it no longer counts, but its history is kept. Admins start a review for one company or the whole group, then keep or end each person's access with a reason. Reviewers can't decide on their own access, and every decision is recorded.
Expired access is treated as no access everywhere, from screens to approver lists to conversations.
- Kinnow lists which roles hold both halves of a conflicting pair of duties, and access with an end date already in the past is refused.
Step by step
- An administrator starts a review. In Admin, open Access reviews and choose Start a review. Pick one company, or "Whole group" for access given across every company, and give the review a name, for example "Q3 access check".
- Kinnow lists who has access. A review lists everyone whose access is limited to the company you chose, with their role and any end date. Group-wide access is reviewed on its own, by someone who can see the whole group.
- A reviewer goes person by person. For each one, choose Keep or End access. When keeping, you can add an end date; access then stops by itself on that day and you are not asked again before it.
- Ending access needs a reason. The reason is written down, and the access ends straight away. What the person held stays on record, and you can give it back later from the roles screen.
- Nobody decides their own access. If a row is yours, the screen says "This is your access. Someone else has to decide it."
- Close the review. People you did not get to keep the access they had, and the review shows how many were left undecided. You can start a new one for the same company afterwards.
Ask us to run an access review on a sample of your own users and roles.
What you see on screen
| On the screen | What it shows |
|---|---|
| Start a review | Which company, the name of the review, and a Start review button. |
| The list of reviews | Review, company, status (Open or Closed), how many are decided out of how many, and when it started. |
| One review | Person, role, when their access ends, the decision, and Keep and End access buttons. |
| Keep dialog | "Keep until" date, optional. It explains that access stops by itself on that day. |
| End access dialog | A required reason, and a note that the record of what they held stays. |
| Close review | A count of people with no decision yet, whose access stays exactly as it is. |
Who uses it
- Company administrator: starts and closes reviews, for example every quarter.
- Department heads or finance head: decide who keeps access in their area.
- Group administrator: reviews access given across every company.
- Auditors: ask who still has access, and who said they should.
See who still has access in your company, and who said they should.
Related
- Where it lives: Admin.
- Sign-offs with no self-approval: the approval inbox.
- Who can see which columns: role-based column masking.
- Who changed what: field-level change history.
Questions
What is Access reviews & grant expiry in Kinnow?
Give access with an end date and run regular access reviews; nobody approves their own access.
What changes for the business?
Run regular access reviews inside Kinnow, instead of in spreadsheets and email.
Is it available today?
Yes, it is live.
What happens to a person's record when I end their access?
Nothing is deleted. The access ends straight away, the reason is saved, and what they held stays on record. You can give it back later from the roles screen.
Can I review my own access?
No. Someone else has to decide it. You can still run the review and clear everyone else's rows.
More in the Safe and in your control
Set your controls, give auditors signed proof
Choose how strict each financial control is, then export a signed statement showing who set it.
Safe and in your control · VeilKeep sensitive details away from AI Live in part
Before business data reaches an AI service, Kinnow removes identifiers, hides names and withholds risky text. It covers Ask Kinnow and most agents today; the rest are being added.
Safe and in your control · Approvals inbox & duty splitsOne approval inbox; nobody approves their own
Every sign-off waiting on you in one inbox, with named approvers and no approving your own requests.
Safe and in your control · Self-Checking StatementsFinancial statements that check themselves
If a balance sheet or profit and loss in your own layout doesn't add up, Kinnow says so at the top of the screen.
Safe and in your control · Kinnow SignUnlimited e-signatures built in
Sign leases, offer letters and other documents inside Kinnow, unlimited and built in.
Safe and in your control · Ageing Bridge + source-clock reconciliationExplain every difference after switching systems
See how today's receivables differ from your old system's export, customer by customer, using the entry dates your old system recorded.
Tell Kinnow what slows you down.
Answer three questions. Get the applications, the agents and a two-week plan for your business.