User Access Review is a control that ensures that only authorized users have access to applications or infrastructure. A User Access Review may lead an application business or IT owner to discover that users who have left the company or moved to another team still have access to applications or infrastructure athough this access should have been disabled.