Access certifications

Understand access certifications tool scopes, features, and capabilities, with sample workflows and example prompts.

Early Access release

Tool name
manage_governance_access_certification
Okta scopes
okta.governance.accessCertifications.manage, okta.governance.accessCertifications.read, okta.governance.reviewer.read, and okta.governance.reviewer.manage

What you can do

Create, launch, and manage access certification campaigns and their reviews. Reviewers can also work through the reviews that are assigned to them.

Campaigns

  • List campaigns for access certifications
  • Create access certification campaigns
  • Launch campaigns to initiate the review process
  • Retrieve campaign details and configuration
  • Delete a campaign that has not yet been launched
  • End an active campaign, closing all remaining reviews
  • Move campaigns through a full lifecycle, from creation through launch to end

Reviews

  • List reviews across campaigns
  • Retrieve review details
  • Reassign pending reviews to a new reviewer

My reviews (End user)

  • List the reviews that are assigned to you
  • Submit decisions on your reviews
  • Submit one decision in bulk for every review that matches a Governance Analyzer recommendation (bulk decisions support only approval)
  • Check the status of a bulk decision submission

Key features

  • Paginate through campaign and review lists using a cursor
  • Reduce LLM token usage with token-optimized TSV responses
  • Restrict actions based on your granted OAuth scopes

Sample use cases

Use case Prompt Result
It's quarter-end, and the admin needs to certify who still needs access to App A. The admin wants to start the campaign and make sure that every review has an owner so nothing stalls. Create a certification campaign for App A access, launch it, list its reviews, and reassign Bob's pending reviews to Alice. The campaign is created and launched, its reviews are listed, and Bob's pending reviews are reassigned to Alice.
The admin's App A certification has been running for a while. The admin wants to check whether any reviews are still open and, if everyone is done, close it out so it stops nagging reviewers. Show me the details of the App A certification campaign, list its remaining reviews, and if none are pending, end the campaign. The campaign details and remaining reviews are shown, and if nothing is pending the campaign is ended, confirmed by re-reading its status.