# Restricted Roles

**The** **Restricted Roles** **Report** provides a list of users with access to restricted Roles.&#x20;

{% tabs %}
{% tab title="Summary" %}
Each Tracked Role displays a summary of the following: &#x20;

* **Users -** Number of Users with Correction-Level Access.
* **Remediate -** Number of Users with access pending removal.
* **Not Reviewed -** Number of Users pending review. &#x20;

#### How To Review Users with Access to Restricted Roles:

1. Navigate to **Environments** and select an **Environment.**&#x20;
2. Select '**Audit Review'** and click the **Restricted Roles Report.**&#x20;
3. Use the dropdown to select an existing **Audit Project** or **Create New**.
4. Click the **'View'** icon to display a list of users with access to the control. \
   \&#xNAN;*\*Filter using the various tabs to customize the report view.\**&#x20;
5. Under the Decision Column, click **Approve** or **Deny.**&#x20;

{% hint style="info" %}
If Restricted Role Access is marked as **'Deny,'** it will display under the **'Remediate'** column until a security administrator *removes* the access.&#x20;
{% endhint %}

<figure><img src="https://4263253103-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fe25a8u5fuAxDPpsekhB9%2Fuploads%2FfhFqaQnXQn5lN9KpwhmG%2FRestricted%20Roles%201%20.png?alt=media&#x26;token=ce45970f-53a5-4795-a85c-f8c01ad83e13" alt=""><figcaption></figcaption></figure>

<figure><img src="https://4263253103-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fe25a8u5fuAxDPpsekhB9%2Fuploads%2FlsrZRmAjeDedcSBqFqFs%2FRestricted%20Roles%202.png?alt=media&#x26;token=28b44bd9-0c7c-43ff-a99e-e866cb8b0125" alt=""><figcaption></figcaption></figure>
{% endtab %}

{% tab title="Reports" %}
Restricted Roles Reports can be created and shared with any user.  *\*A Sentinel account **is not*** ***required** to view or download the report.\**

* Generate On-Demand Reports for immediate use.
* Schedule Reports to automatically create and distribute at a set interval.

{% hint style="info" %}
Audit Reports are available to View Online (URL), Save as PDF, or Download as CSV. &#x20;
{% endhint %}

#### Generate On-Demand Restricted Roles Reports:

1. Navigate to **Environments** and select an **Environment.**&#x20;
2. Select '**Audit Review'** and click the **Restricted Roles Report.**&#x20;
3. Click **'Create Report.'**
4. Select an existing **Audit Project** or enter a **Custom Period.** \
   \&#xNAN;*\*The report will only include Audit Review decisions within the selected period.* &#x20;
5. Enter a **Report Title (Name).**
6. Click **'Generate Report'** and then click **'View Report.'** <br>

   <figure><img src="https://4263253103-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fe25a8u5fuAxDPpsekhB9%2Fuploads%2FUWOVZCh89jcrHAGv58Iw%2FOn-demand%20Restricted%20Roles%20Report.png?alt=media&#x26;token=b6eba9cf-9123-4f03-8438-b6ade4b4c605" alt=""><figcaption></figcaption></figure>

#### Schedule Restricted Roles Reports:&#x20;

1. Navigate to **Environments** and select an **Environment.**&#x20;
2. Select '**Audit Review'** and click the **Restricted Roles Report.**&#x20;
3. Click **'Create Report'** and select the **'Add New Schedule'** tab.&#x20;
4. Enter one or more **Recipient Emails**, separated by a comma.
5. Select an existing **Audit Project.**   \
   \&#xNAN;*\*The report will only include Audit Review decisions within the selected period.*&#x20;
6. Select the **Interval** (distribution frequency) and enter a **Time/Day.**&#x20;
7. Click **'Save.'**\
   \&#xNAN;*\*Scheduled reports will appear under the 'Scheduled' tab.* <br>

   <figure><img src="https://4263253103-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fe25a8u5fuAxDPpsekhB9%2Fuploads%2FrT0ksWPtfRig6uWwMsBD%2FSchedule%20Restricted%20Roles%20Report.png?alt=media&#x26;token=700bc8ef-d050-44fd-b5dd-0199697c3581" alt=""><figcaption></figcaption></figure>

{% endtab %}

{% tab title="Settings" %}
Sentinel provides the option to track and audit Restricted Role Access. This feature is fully configurable within the Restricted Roles Settings.&#x20;

#### Add Roles to Track Access:

1. Navigate to **Environments** and select an **Environment.**&#x20;
2. Select '**Audit Review'** and click the **Restricted Roles Report.**&#x20;
3. Under the '**Settings**' tab, search and select a Role to track.&#x20;
4. Check the box to add to **Audit.**<br>

   <figure><img src="https://4263253103-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fe25a8u5fuAxDPpsekhB9%2Fuploads%2FtJhH56DFF4yzarwzmx5e%2FRestricted%20Roles%20Settings.png?alt=media&#x26;token=3f4f9f75-d909-4a6d-bd1a-1b3a53045e34" alt=""><figcaption></figcaption></figure>

{% endtab %}
{% endtabs %}
