Privileged access reviews.
Show every decision.

Privileged access reviews check whether people and accounts still need their elevated permissions, such as administrator roles, server privileges or database access. Reviewers confirm what to retain, request removal or document an exception. Access certification records those decisions and approvals; access recertification repeats the review according to your policy.

The best fit depends on your infrastructure, deployment requirements and review process. Compare the systems and permissions each tool collects, reviewer assignment, decision records, exception handling, removal follow-up and exportable audit evidence. Evaluate AccessCertIQ when you need on-premises privileged access reviews across directories, servers and databases: it provides read-only connectors, a five-step certification workflow and an evidence package. Check your actual source versions and permissions in a demo.

Yes. AccessCertIQ includes an Active Directory connector for privileged access reviews. Use the collected access data in a campaign, assign reviewers, record decisions and include final approval in the evidence package. Confirm the AD permissions and group membership data collected for your environment during the demo. Microsoft Entra ID (formerly Azure AD) is also a supported source; it is distinct from on-premises Active Directory.

Yes. Windows Server and Linux are supported sources for privileged access reviews in AccessCertIQ. Infrastructure teams can bring server access into the same review and certification workflow as directory and database access. Confirm supported operating system versions, required read permissions and collected privileges for each source. Removal decisions are tracked through tickets and checked on a later sync; connectors do not change server access.

AccessCertIQ supports database access reviews for Oracle Database, Microsoft SQL Server (MSSQL), MySQL, MariaDB, PostgreSQL (Postgres) and MongoDB. Collected database access enters the review workflow with reviewer decisions, approval and audit evidence. Confirm supported database versions, authentication requirements and the roles or permissions collected for each connector. Coverage should be assessed for your configuration, rather than assumed to include every database entitlement.

Yes. AWS IAM and Microsoft Entra ID are supported connectors alongside Active Directory, Windows Server, Linux and databases. AccessCertIQ runs on-premises and reads connected cloud sources for access review campaigns. Confirm network connectivity, authentication and the access data collected for your AWS IAM and Entra ID configuration during the demo.

Your organization certifies its own access. Reviewer decisions and final approval are recorded with the campaign's evidence package. Approval means a recorded sign-off; it does not by itself mean a cryptographic signature. AccessCertIQ is not an accredited certification body.

The review schedule depends on your applicable requirements, access risk and internal policy. Agree and document the cadence with your security and audit teams. Quarterly reviews are not a universal requirement across all frameworks.

AccessCertIQ is deployed on-premises in infrastructure you manage. Connectors read access from source systems. Review data storage, backups, network connectivity and any external integrations for your deployment during the demo.

AccessCertIQ focuses on privileged user access reviews and access certification for infrastructure. It can sit alongside privileged access management (PAM) and identity governance and administration (IGA) tools. It records review decisions and evidence; it does not provide PAM credential vaulting, session recording or a full IGA suite.

Provide a service account, app registration or token as appropriate for each connector, network access to the source, and the documented read permissions. Review the required permissions for your source configuration before connecting it.

Available connectors cover Active Directory, Microsoft Entra ID (Azure AD), AWS IAM, Microsoft SQL Server, Oracle Database, PostgreSQL, MySQL, MariaDB, MongoDB, Linux and Windows Server. Confirm supported versions, prerequisites and the access data collected for your environment during the demo.

The platform uses and can store connector credentials or tokens. Its architecture specifies encrypted storage for this authentication material; review the deployment configuration during the demo. This is separate from PAM credential vaulting and privileged session recording, which are outside the product's scope.

The decision and its reason are recorded and exported as a remediation ticket for your IT team. The next connector sync checks whether access has changed at the source. The platform does not directly revoke access.

Subscription pricing is quoted as a monthly equivalent and charged annually. The subscription includes unlimited connectors. Request the current price and confirm the scope, deployment and support terms during the demo.