The user access review is the cornerstone of identity and access security and is crucial when it comes to securing access to an organization’s resources and demonstrating compliance. The principle is simple. It consists of reviewing on a recurring basis the user access rights granted within the organization’s information systems. This paper explores methods for making this essential control function a reliable, simple and powerful exercise.