Access reviewer
Reviews who can sign in and what they can see: people who left, unused accounts, outside and shared accounts, broad roles and tokens that never expire.
How it works
A quarterly-style access review of your own company, for admins who manage users or roles. The agent finds accounts that can still sign in for people who have left, users with no sign-in for 90 days or more, who holds sensitive permissions (payroll, employees’ personal data, bank details, compensation, managing users and roles, AI agents, Books) with the count per role, roles that grant very broad access, outside accounts (accountants, auditors, partners, personal email addresses) and what they can read, shared accounts such as admin@ or hr@, and API tokens that never expire or belong to someone who left. It explains why each finding matters and drafts the changes (deactivate a user, remove a role, rotate a token) for you to apply in Admin › Users & roles. It never changes a user, a role or a token itself. Export the review as CSV for your records.
About 1 credit per review with a summary; the findings, risky users and CSV are free
What it reads
- Your company’s users, their roles, status and last sign-in
- Roles and their permissions, API tokens (never the token itself) and outside access
- Employees who left, from People (if you may view employees)
When it starts
- When an admin asks for an access review
What it can do
- Draft access changes for you to apply (after you confirm)
What it never does
- Deactivate users, change roles or revoke tokens
Safe by design
- One assistant, many agents. Ask the Employee assistant in the app or on WhatsApp; it calls the agents your company has hired that you may use.
- Hired, not switched on. Your admin hires each agent from the catalogue and chooses who can use it.
- Agents propose, people confirm. Anything that changes data, like a leave request, waits for a person to confirm it.
- Same access as the user. An agent sees only what the person asking is allowed to see.
- AI processing in India. Agents run on models hosted in India (AWS Mumbai).
- Budgets and a hard stop. Set a monthly credit limit per agent; agents stop when credits run out.
- Every run recorded. Admins see each run, the credits it used and what it did.
Frequently asked questions
What does the Access reviewer do?
A quarterly-style access review of your own company, for admins who manage users or roles. The agent finds accounts that can still sign in for people who have left, users with no sign-in for 90 days or more, who holds sensitive permissions (payroll, employees’ personal data, bank details, compensation, managing users and roles, AI agents, Books) with the count per role, roles that grant very broad access, outside accounts (accountants, auditors, partners, personal email addresses) and what they can read, shared accounts such as admin@ or hr@, and API tokens that never expire or belong to someone who left. It explains why each finding matters and drafts the changes (deactivate a user, remove a role, rotate a token) for you to apply in Admin › Users & roles. It never changes a user, a role or a token itself. Export the review as CSV for your records.
Can the Access reviewer change data on its own?
No. It asks a person to confirm before it will: draft access changes for you to apply. It never does the following: deactivate users, change roles or revoke tokens.
How much does the Access reviewer cost?
About 1 credit per review with a summary; the findings, risky users and CSV are free. Credits are a paid add-on to any flowwork.ai plan at ₹100 (US$ 1.19) per 1,000 credits, and new companies get 500 free trial credits for 30 days.
Where is the data processed?
Agents run on AI models hosted in India and see only what the person using them is allowed to see. Admins see every run and the credits it used.
Other agents
Tell it about your company in plain words; it plans departments, offices, holidays, leave, work week, payroll and expenses for you to confirm.
Takes your spreadsheet of employees, leave balances, salaries, payroll YTD or opening balances, checks every row and imports it on your Confirm.
Answers “How do I…?” from the flowwork help guide in a few steps and opens the right screen. It only shows screens you already have access to.