User Access Reviews Made Defensible: Meet Caddie in OpenIAM

300 rows. One Friday deadline. That’s a user access review — and without context, reviewers click “certify” and move on. Meet Caddie, the access review assistant in OpenIAM Identity Governance. For IT and security teams in regulated industries such as financial services, public sector, and pharmaceutical organizations, every access certification decision has to stand up to an audit. Yet the context a reviewer needs lives in different places: who the user is, what the entitlement grants, whether the access is normal for their role, and what breaks if it’s revoked. Caddie brings that context one click from the row. During an access review, every user or entitlement awaiting a decision has a Caddie button right next to Certify and Revoke. It shows: ✅ User and entitlement information: title, status, manager, tenure, and what the access grants in which application ✅ Peer comparison: how many people on the same team hold the same access ✅ Certification history: what earlier campaigns decided, and how often the access was revoked for others (counts only, no names) ✅ Revoke impact preview: when access would end, what’s lost and what’s kept, what happens to accounts, and whether any rule would grant it back ✅ Ask for help: identifies the entitlement owner, your manager, or the campaign manager, and drafts the message for you Caddie never recommends, never acts, and changes nothing. It gives reviewers the facts, and the decision stays with them. Administrators can switch it on per certification in the Risk tab. 🔗 Learn more about OpenIAM Identity Governance: https://www.openiam.com/ 🔗 Request a demo: https://www.openiam.com/contact-sales #IAMReporting #IdentityGovernance #IAM