Give a role for a while and review access
Make someone an administrator for two weeks, and check now and then that every member still needs the role they hold.
In short
A role given for a while ends by itself: on the day you choose, the member steps back to the role they held before and is told. An access review lists the members you choose - those who hold something powerful, on the organization or on a team, or everyone - so you can keep each one's access, change it or remove them, and then close the review as a record of who looked and what came of it.
Before you start
- Who: both need "Invite and manage members". You can only give a role whose permissions you hold, and you never review or change your own access.
- The owner is always an administrator, so their role never ends and is never reviewed.
Give a role for a while
- Open the organization and choose "Members".
- Open the member's row menu and choose "Give a role for a while".
- Pick the role. Only roles that allow everything the member's role allows now are offered, so stepping back only takes access away.
- Choose how long - a day, a week, two weeks, 30 days - or "On a day" to pick the last day, up to a year ahead, and choose "Give role".
- The role column then says "Until <day>, then <role>". To move the end or keep the role for good, open the row menu and choose "Change role end".
If stepping back would leave a powerful permission with nobody who can use it, the member keeps the role and the activity log says why.
Review who has access
- On the Members tab, choose "Access reviews" above the list, then "Start a review".
- Choose who it covers - "Powerful roles" or "Everyone" - and the day it is due, then choose "Start a review".
- For each member, choose "Keep" when they still need their access. To change their role or remove them, use the row menu: the line then says "Changed" or "Removed" by itself.
- When you are done, choose "Close review". Members nobody decided are recorded as "Not reviewed", and the review can no longer change.
- Closed reviews stay below the open one. Choose one to read its lines again.
Each line shows the member's organization role, their roles on teams and the teams they are an admin of. "Powerful roles" also covers a member whose role on a team is powerful, and team admins. If any of this changes during the review, the line says "Changed" and shows what they hold now. Team lead and deputy titles and hiring roles in Jobs are not part of a review.
One review is open at a time. If it is still open after its due day, the person who started it is reminded once.