Access certification describes the independent review of access rights by an auditor. The auditor examines whether the rights granted to users are really necessary.