Summary: Calendar-driven access reviews miss the access risk that accumulates between cycles — a department transfer in March, a title change in May, access that no longer fits sitting open until the June review. Oleria Trustfusion, an AI-native identity security platform, closes this gap with HR-driven access review signals surfaced inline in every scheduled review, flagging what changed in the user's HR record so reviewers see the context that matters on the lines that need attention.
When someone's HR record changes, the next access review surfaces the change inline.
A role change, a department transfer, each surfaces inline in the next scheduled access review with the change context flagged. Reviewers see what's actually different about each user since the last review. Auto-triggered scoped reviews on HR events are coming next.
Quarterly reviews are calendar-driven. Someone changes department in March; the next review runs in June; their old-department access doesn't get re-evaluated until then. That's three months of inappropriate standing access, the kind audit increasingly flags.
The HR data is right there in Workday, but most identity tools don't read it as a signal at review time. They run reviews on a fixed schedule and treat HR changes as separate events that nobody connects to the access decision. The result: reviews complete on time but miss the events that matter.
Oleria Trustfusion surfaces HR-driven access review signals per line so reviewers see title, department, and manager changes inline alongside dormancy and peer analysis.
Within every scheduled review, the HR-change flag surfaces per line. Reviewer sees what's actually different about the user since last review — title change, department transfer, manager change.
The window for HR-change detection is configurable per campaign; default is 90 days. Per-app and per-sensitivity tuning is on the roadmap so sensitive apps can use a tighter window.
Each access-review decision captures the HR signal alongside reviewer, decision, evidence, and timestamp. Auditors see whether the HR change was acknowledged at review time.
Coming next. Auto-fire a scoped review for the affected user immediately when a high-impact HR attribute changes — separate from the quarterly cycle, so the access drift between cycles closes
Oleria detects HR attribute changes like title, department, location, manager, and surfaces them inline in every scheduled review. Reviewers see what's actually different about each user since the last review. Auto-firing scoped reviews on HR events is coming next.
R change visibility in scheduled reviews
Configurable lookback window Per campaign
Event-triggered scoped reviews
Audit findings on stale role access Reduced via the inline signal today
Mover handles confirmed role transitions; this surfaces HR change as a signal in regular reviews.
Workday, SAP SuccessFactors, Oracle HCM, Sage Intacct, plus SCIM-based providers.
Default 90 days; per-app tuning on the roadmap.
Coming next. Today, changes surface inline in the next scheduled review.
Title, department, location, manager, and employment-status changes within the lookback window.
