Step 1: Receive a notification and go to the task

ConductorOne sends you notifications by email and Slack (if enabled) whenever a task is assigned to you. To ensure that notification emails are delivered to your primary inbox, add no-reply@conductorone.com to your email contacts list.

Go to Interact with ConductorOne via Slack for instructions on setting up our Slack app.

1. Log into ConductorOne by clicking the link in your email or Slack notification.
2. If the link in your notification does not direct you to the task list automatically, locate it by clicking on Certifications, Approvals, or Revocations, as appropriate, in the My work section of the navigation panel. The badges next to each of these menu items show the number of tasks of each type currently awaiting your attention.
3. Approval tasks are grouped by application. Select an app to see the approval tasks for that app assigned to you.

Step 2: Review the task and take action

Each line in the table is a task assigned to you. For each task, complete the appropriate steps:

Certification tasks

1. Review the access
   • Look at the account and the resource. Is this access needed for the user’s work and appropriate to the user’s role in the company?
2. Provide your decision
   • If the access looks correct, click Certify. This means you’re certifying the correctness of this access, and giving your approval for this access to continue.
   • If the access doesn’t look correct, click Remove. This means you believe the access isn’t needed or isn’t appropriate, and you’re recommending its removal.

Approval tasks

1. Review the request
   • Look at the account and the resource. Is this access needed for the user’s work and appropriate to the user’s role in the company?
2. Provide your decision
   • If the access looks correct, click Approve. This means you give your approval for this user to be granted this access.
   • If the access doesn’t look correct, click Deny. This means you believe the access isn’t needed or isn’t appropriate.

Provisioning tasks

These requests have already been approved, and are assigned to you because they require manual provisioning of the new access.

1. Complete the provisioning process in the requested app and click to Mark completed or Mark errored.

Revocation tasks

These requests are generated when someone (such as the user, their manager, or a reviewer during an access review campaign) decides that access is no longer used, needed, or appropriate and recommends its removal. You are asked to review the revocation request before the access is removed.

1. Review the request
   • Look at the account and the resource. Is this access no longer needed for the user’s work or appropriate to the user’s role in the company?
2. Provide your decision
   • If you agree that the access should be removed, click Confirm. This means you are confirming that this access should be removed.
   • If you disagree, and think that the access should not be removed, click Decline. This means you are declining the request to remove the access.

Deprovisioning tasks

These revocation requests have already been confirmed, and are assigned to you because they require manual deprovisioning of the old access.

1. Complete the deprovisioning process in the requested app and click to Mark completed or Mark errored.

Step 3: Repeat the process

Repeat these steps to review and take action on each task assigned to you. You can view your completed tasks in each task category by clicking Completed tasks.

Find more information about a task

If you need more information, click the task number to open the details view, where you’ll find additional information to help you make your decision:

• The Context & analysis section gives details on how many other users in the organization have this access, the risk level of the access (if known), and other details.
• The Comments section shows any notes other members of your organization have made about this task.
• The Task Details section shows the task’s workflow, highlighting the role you play, and the policy being applied to this task. In this section you’ll also find controls to reassign the task, if reassignment is allowed.

Reassign a task

In some cases, such as when an employee has moved to a new position in the company or when a colleague is out of the office on an extended vacation or leave, the task cannot be completed by its assigned reviewer and must be reassigned.

1. In the task list, click the more actions ( … ) menu and select Reassign to…. Alternatively, from a task’s details view, click Reassign in the Assigned to area.
2. Select the new assignee and provide a reason for the reassignment.

The newly assigned reviewer will receive email and Slack (if enabled) notifications about their new task assignment.