Do I have to review other users’ existing access rights? When and how?

Many organizations require business stake-holders, such as managers or data custodians, to periodically review the access rights of users within their scope of authority. If you are such a stake-holder, you will periodically receive an e-mail invitation to complete a review. Click the link in the e-mail and step through the list of items in the review, certifying, revoking or delegating each one as appropriate. Read more here: https://hitachi-id.com