Campain Review
Last updated
Last updated
Campaigns that have been created and configured are accessible for execution.
Navigate to the Review Campaign tab to view both active (In Progress) and completed campaigns.
To begin, select an active campaign, as indicated by the arrow below.
This marks the commencement of an Active Campaign.
Positioned near the campaign's name is a 'Terminate' button, allowing the termination of the current campaign (it can still be initiated again from the start in the Campaign Config tab).
Beneath it, the campaign's pipeline is displayed, comprised of 6 stages.
In the initial stage of the campaign, managers are prompted to review the application permissions of their subordinates and make decisions on whether to:
Allow them to retain their existing permissions.
Delete the account from the application.
Revoke the permissions and provide an explanation detailing the changes to be made to the account's permissions.
To efficiently distribute the workload among staff, each manager is automatically assigned their direct subordinates to manage permissions within the portal, in accordance with the Organization Tree.
In instances where an employee has no supervisor linked above them in the tree, it becomes the responsibility of the Access Manager to manage their permissions within the Campaign review page.
For instance, in an organization with five employees arranged in a direct hierarchical line, where each employee is directly responsible for managing the subordinate directly beneath them, we, as the Access Manager, would be responsible for managing the employee situated at the top of the organizational tree within the Campaign's review page.
In a company with 100 employees where every 10 employees are on the same Tree level, each Manager group are responsible for 10 employees (directly under them).
Highlighted below is a user's roles (permissions) within the applications assigned in the campaign.
By clicking on each permission, you can access its details.
Additionally, the 'Add Justification' button, indicated by the arrow below, enables you to provide reasoning behind your status selection.
Displayed below is the view window that appears when clicking on a permission.
Below is the 'Add Justification' window.
Enter a justification and click on 'Save' to record your reasoning.
After overseeing the permissions of our direct subordinates, proceed by clicking on the 'Verify Changes' button, as indicated by the arrow below, to progress to the second stage.
In this stage, if a campaign is configured to be linked to an existing vendor, the vendor's owner is mandated to personally review all accounts.
They must then provide their own Keep/Revoke/Delete selections for the applications' accounts.
In the provided example, since there is no vendor owner, the responsibility falls upon us to individually review all accounts.
Remember to click on the 'Verify Changes' button, as indicated by the arrow below, to save any modifications made during this process.
In the third stage, following the completion of reviews by managers and vendor owners, the responsibility shifts to us to inspect all Keep, Revoke, and Delete selections and make necessary changes to the applications' accounts.
Below, the selections made by John's manager and the vendor owner for his user are visible.
Encircled below is the 'View Justification' button, which can be clicked to understand the rationale behind John's manager revoking his permissions, while the vendor owner approves of keeping them.
Upon completing all necessary actions for the users in our applications, click on the 'Execution Complete' button, as indicated by the arrow below.
In this critical stage, managers and vendor owners are informed that the execution stage is complete.
They are prompted to review the changes made and verify that the current user permissions, post-adjustments, are acceptable.
Encircled below are the 'Verify' and 'Decline Changes' buttons, accessible to every manager and vendor owner who submitted changes in the preceding stages.
If the vendor owner declines the changes made, the campaign will revert to Stage 3: Execution. At this point, a 'Show Revoke Reason' button, marked with an arrow below, becomes available.
Click on this button to view the comments from the decliner explaining why they rejected the changes.
The third and fourth stages can go back and forth until all parties involved accept the changes to account permissions.
Completing the Execution stage brings us to the Verify stage.
After the changes made are reviewed and verified by the vendor owner, the process advances to the Sign stage.
In the Sign stage, the designated signer is required to sign the Campaign's PDF, which includes changes and permission approvals.
The signer can locate the signature box in their Staff tab on the Employee Portal.
On the Signer's Staff tab within the Employee Portal, locate the 'View Document' button, as indicated by the arrow below.
After signing in the interactive sign field, click on the 'Save' button, circled below.
Returning to the Campaign's page, it is evident that all stages have been successfully completed.
The signed Campaign file has been automatically uploaded as evidence.
On the Review Campaign page, the completed campaign is now listed among our campaigns, indicating its successful execution and conclusion.
It is available to us in the Campaign Review page, as explained in the first stage paragraph above, because we are also Managers for employees with no supervisor on the
To return to the
To return to the
