Quarterly Access Reviews & Audit Certificates
Certify Global Administrators, Google Super Admins, external guests, and high-risk OAuth grants for SOC 2 CC6.2 / CC6.3 and ISO 27001 A.5.18 compliance.
2026 Q4 Privileged Role & OAuth Access Review
Reviewer: cto@acmeholdings.com · Signed: 2026-11-12T16:30:00Z · SHA-256: e3b0c44298fc1c149afbf4c8…
former-devops@acmeholdings.com (Global Administrator)
No interactive sign-in for 102 days; uses SMS MFA.
Justification: Contractor engagement ended; remove Global Admin role and disable account.
SketchyNote AI Meeting Assistant (19 users, Mail.ReadWrite)
Unverified publisher holding full mailbox read/write and OneDrive write scopes.
Justification: Unapproved shadow-IT AI recorder; revoke service principal grant and push vendor to Pistos.
cto@acmeholdings.com (Global Administrator)
Protected by FIDO2 hardware key + Authenticator.
Justification: Primary executive tenant owner.