--- title: "Review Birthright Access" slug: "birthright-access-review" description: "This guide walks you through how to review birthright access for one or more roles in your organization." tags: ["Access Reviews", "Role Access Review", "How-To"] updated: 2024-06-21T16:19:58Z published: 2024-06-21T16:19:58Z canonical: "help.claritysecurity.com/birthright-access-review" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # How to Review Birthright Access This guide walks you through how to review birthright access for one or more roles in your organization. Reviewing birthright access is a crucial component of any Identity governance program. Running quarterly birthright access reviews helps identify access drift, clean up over-provisioned roles, and reduce the scope of User Access Reviews. **Before you begin:** - Identity Attribute mapping has been configured - Established a Role Based Access Control structure - Roles are populated with Identities and entitlements - Assigned an owner for in scope roles --- ## Create a Birthright Access Review ### Set Up the Birthright Access Review 1. Navigate to the New Access Review page (Access Reviews > Create New or *https://your_tenant.claritysecurity.io/review/create*) 2. Click **Create** Role **Access Review** 3. Fill in the information in the left column: 1. Review Name - ***Birthright Review - Demo*** 2. Assign Items to - ***Role Owners*** 3. Default Reviewer If No Supervisor/Owner Found - ***Clarity Admin -- admin@claritysecurity or yourself*** 4. Frequency - **Once** 5. Start Review On - ***Today's Date*** 6. Business Days to Complete Review - ***15*** ### Scope the Review 1. In the **Type** drop-down select **Specific Roles**. 2. In the **Role** drop-down type and select **Admin**, or any other role that has birthright access *which can be found in the* ***Role*** *side navigation*. 3. Optional settings: 1. Use Entitlement Friendly Name will display the **friendly name** of an entitlement, which is configured in the Entitlement Bulk Editor. If you do not have friendly names configured, the default name will be used. 2. Delay Email Notifications allows you to control when reviewers are notified about their assigned items. 4. **Exclusions** are how to filter out data such as applications or entitlements from the scope of the review. ### Generate the Review 1. Review that all of the following fields have a value set: 1. Review Name - **Birthright Review - Demo** 2. Assign Items Reviews to - **Role Owners** 3. Default Reviewer If No Supervisor/Owner Found - **Clarity Admin** 4. Frequency - **Once** 5. Start Review On - **Today’s Date** 6. Business Days to Complete Review - **15** 7. Type **- Specific Roles** 8. Roles **- Admin/Admin** ![Screenshot 2024-06-06 at 7.20.59 AM.png](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202024-06-06%20at%207.20.59%E2%80%AFAM.png?sv=2026-02-06&spr=https&st=2026-11-14T04%3A26%3A20Z&se=2026-11-14T05%3A26%3A20Z&sr=c&sp=r&sig=y6HZESzfKLiP%2BOD6f19968SapW%2FKfnDwDupRyOlsBqE%3D) 2. Click Create Review ## Clean up After generating the review, look through the data, and explore the review and remediation capabilities. Once finished, navigate to the access review home screen *https://your_tenant.claritysecurity.io/review* 1. Locate the review we just created --> ***Birthright Review - Demo*** 2. Click the **ACTIONS** drop-down. 3. Click **Delete** If you click the button **Archived Templates** there will be a template with the name ***Role Review - Demo***. You can use this template to generate future **Birthright Access Reviews** ## Common Support Questions 1. Can I select multiple roles in a single Birthright Access Review? 1. Yes! After you click on the first role, type in the name and select the applicable role. 2. Why did my review not appear in the **In Progress** reviews? 1. **Potential Cause:** If the roles you selected do not have any birth right access, there will be no data to review. 1. **Confirmation Step** click on the **Ready to Finalize** tab. If the review is there, follow the above **Clean Up** steps. 3. Why do I see duplicate roles in the **Roles** drop-down? 1. **Potential Cause:** One or more users has a Role attribute that contains leading or trailing whitespace. If this happens, there will be 2 roles with nearly identical names. 1. **Confirmation Steps** go to the **Role** side navigation and search for the role name. Copy the two similar names into a text editor and compare. If they are truly identical, reach out to support@claritysecurity.com 4. Why don't I see someone in the **Default Reviewer**-drop down? 1. **Potential Cause** The desired default reviewer does not have the **Clarity Entitlement** Access Certification **Admin**. Grant them this entitlement and go back to step 1 - **Set Up the Birthright Access Review**. --- ## Need help? If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST. An identity is a single entity's (employee, contractor, service account) grouping of service users, attributes, and assigned entitlements. An attribute is a piece of information used to describe a service user, entitlement, or identity. Common examples include First Name, Last Name, Job Title, Department, etc. Role Based Access Control is an approach to managing access by provisioning pre-approved access based on an Identity's function within an organization. An identity is a single entity's (employee, contractor, service account) grouping of service users, attributes, and assigned entitlements. Access Review, also known as Access Attestation, Access Certification, or User Access Review, is the process of reviewing the appropriateness of the entitlements assigned to a service user in a downstream application. A Role is a group of entitlements provisioned for an Identity during life cycle management events. A Reviewer is responsible for deciding whether access or other **Access Review** items are appropriate or inappropriate. In Clarity this is typically a Supervisor or an Application/Entitlement Owner. An Entitlement is an assignable permission found in a downstream application. Common examples include licenses, groups, and policies. In Clarity, a Friendly Name is a configurable option for each Entitlement in your tenant, that allows you provide human-readable, user friendly name. These can be optionally shown in Access Reviews. These can be configured in **Entitlements > Bulk Edit** Access Certification, also known as Access Attestation or User Access Reviews, is the process of reviewing the appropriateness of the entitlements assigned to a service user in a downstream application.