What an Access Review Covers
An access review is a scheduled check of every user, group and app connection in your 1Pass setup. It confirms whether each person still needs the access they have, whether their role has changed, and whether any permissions are wider than they should be. For a small business, that can mean checking sales, finance, operations and admin users in one clear run.
The review is practical, not theoretical. We look at active staff, contractors, temporary hires and shared access points, then record what should stay, what should change and what should be removed. That helps reduce account sprawl and keeps your team aligned with what they actually use day to day, not what they were given months ago.
Where Access Reviews Fit Best
Quarterly reviews suit most small businesses in Johannesburg, Pretoria, Durban, Gqeberha, Stellenbosch and Cape Town, especially where teams change often or people wear more than one hat. If your business has staff joining and leaving, or if one person handles finance, supplier systems and payroll, regular checks are worth it. They are also useful after restructures, leave cover, new app rollouts or when a contractor has finished work.
- Teams with 5 to 200 users
- Businesses using several cloud apps
- Operations with remote staff or hybrid working
- Companies needing cleaner offboarding and audit trails
- Owners who want a clear record of who approved what
For smaller teams, an annual review is the bare minimum, but quarterly gives you a much better grip on access that can drift over time. That matters when staff share duties and no one notices an old login still working in the background.
Review Sizes And Options
We structure access reviews to match the size of the team and the number of apps in use. A simple review may cover a single vault or one department. A broader review can cover all users across all business systems, with follow up actions tracked until they are closed. If you run a distributed team, remote review sessions can be arranged for branches, home workers and managers in different time zones.
- Single department review
- Company wide quarterly review
- Role based review for finance, sales or operations
- Review after onboarding or offboarding waves
- Remote review support for nationwide teams
We can also separate admin access from standard user access so the right people are checking the right things. That keeps the process manageable, especially for small businesses where the owner or office manager is already juggling a lot.
How The Review Process Works
First, we confirm the review scope and the people who need to approve changes. Then we pull the current access list, compare it against role requirements and flag anything outdated or unnecessary. After that, we help your team decide what should be kept, changed, removed or reassigned. The result is a clean action list and a better view of your security position.
For businesses in Woodstock, Century City or other busy parts of Cape Town, this can be handled remotely with no disruption to the office. There is no special power or gas requirement, just a stable internet connection, admin access and a decision maker who can confirm changes. If load-shedding is affecting your office, the review can still continue from another location once access is available again.
Care, Servicing And Follow Up
Access reviews work best when they are part of routine servicing rather than a once-off tidy up. We recommend quarterly checks for most teams, plus an extra review after staff exits, role changes or new system rollouts. This helps keep permissions current and reduces the chance of old access sitting untouched for months.
- Review active users and dormant accounts
- Check admin and elevated permissions separately
- Confirm contractor access expiry dates
- Record approval for removals and changes
- Repeat after major team or system changes
We can also align the review with your offboarding process, so access is removed cleanly when someone leaves. That is often where the biggest risk sits, and it is easy to miss if no one is responsible for the follow up.
What To Check Before You Order
Before setting up access reviews, decide how many users need to be checked, which apps are in scope and who can approve changes. You should also know whether you need one review cycle or an ongoing quarterly programme. If your team uses shared admin accounts or outside support, mention that up front so those entries can be handled properly.
- Total number of users and contractors
- List of apps, vaults and shared accounts
- Who signs off on access changes
- Whether quarterly reviews are needed
- Any compliance or audit requirements
We work with small business teams across South Africa, from remote onboarding nationwide to support in Johannesburg, Pretoria, Durban and Gqeberha. If you are not sure where to start, we can help you define the review scope and the order of work, then keep the process moving without fuss.
Practical access reviews for small teams
1Pass is built for small business teams that need clear control without extra admin. Our access reviews are handled with a practical approach that suits owners, operations managers and IT leads who want fewer surprises. With Lukhanyo Maseko leading the business from our Woodstock, Cape Town base, and team support from Siyanda Mdletshe, Revasha Moodley, Kgosi Kgosana, Ruan van der Merwe, Zinhle Khumalo and Zaheer Davids, you get a proper local team behind the process.
Whether your business is in Stellenbosch, Century City or working remotely across South Africa, the aim is the same: make sure every person has the access they still need, and nothing more. That is a small task on paper, but it saves time and prevents trouble later on.
Key facts
| Review frequency | Quarterly recommended, with extra checks after staff changes or new system rollouts |
|---|---|
| Team size | Best suited to small businesses from 5 to 200 users |
| Scope options | Single department, full business, or role based access review |
| Delivery | Remote review support for teams across South Africa |
| Requirements | Internet access, admin credentials and an approved decision maker |
| Outputs | Action list, access changes, approval record and review summary |
