BEAM · ACCESS MAP
Who can reach what, right now.
See every person and every system they can touch, find access that never expires, and review each grant: keep it or revoke it, with a record of the review.
THE USUAL WAY
The access review is a spreadsheet.
Finding the grant is only the start. The decision needs a record.
Who has access
dana → orders-db, prod-eu
sam → #launch, shop/app
priya → AWS · shop-prod
lee → app-01
Recertify
Owners and admins keep or revoke each one.
dana → orders-dbEnds in 2 days
dana → prod-euEnds in 20 days
sam → #launchEnds in 30 days
sam → shop/appNo end date
priya → AWS · shop-prodNo end date
lee → app-01No end date
- 01Every person, every system
- 02Switch the view
- 03Expiring and stale
- 04Keep
- 05Revoke
- 06On record
- 07See what happened
Example data.
How it works
See, flag, decide
See the map
See every person and system across AWS, GitHub and everything else Beam brokers. Switch between By person and By system.
By person · By system
dana → orders-db · Database
Example data.
Flags for expiring and stale
Find grants that end soon or have no end date and are old enough to review.
orders-db · ends in 2 days
shop/app · no end date
Example data.
Keep or revoke, recorded
Owners and admins decide each grant. The date and kept and revoked totals form the review record.
reviewed on 4 Oct · kept 4 · revoked 2
Example data.
Explore the map
By person or by system
Search people and systems, switch the view, and filter active, expiring and past grants. Each grant shows its system, who granted it, the organisation role and when it expires.
Database · granted by priya · Engineer
Ends in 2 days
Kubernetes · granted by priya · Engineer
Ends in 20 days
SSH · granted by dana · Engineer
No end date
Cloud account · granted by dana · Engineer
No end date
Slack · granted by dana · Contractor
Ends in 30 days
GitHub · granted by dana · Contractor
No end date
Example data.
Review signals
What gets flagged
Expiring grants have an end date soon. Stale grants have no end date and have been around long enough to need a decision.
dana → orders-db · ends in 2 days
sam → shop/app · 120 days old
priya → AWS · shop-prod · 95 days old
lee → app-01 · 200 days old
Example data.
Recertify
A review you can show an auditor
Owners and admins keep or revoke each active grant. The date and decisions become evidence for your periodic access reviews.
Recertify · review record
reviewed on 4 Oct · kept 4 · revoked 26 grants reviewed. Evidence for your periodic access reviews.
Owners and admins can recertify.
Example data.
ON THE BUSINESS PLAN
Access governance
See who has access, decide what stays, and keep the review record.
Questions
Frequently asked questions
Every person and every system they can touch across AWS, GitHub and everything else Beam brokers. Search people and systems, switch between By person and By system, and filter active, expiring or past grants. Each grant shows the system, who granted it, the organisation role and when it expires.
More in Beam
See what you run, and what it costs.
Free plan, no card needed.