LMS glossary
Dormant users and access reviews
An access review is a regular check of who can sign in to a system and with what permissions, to remove access that's no longer needed. Dormant users are accounts that haven't been used for a long time. In an LMS, reviews focus on inactive administrators, people who never logged in and long-dormant learners.
Why it matters
Dormant accounts are often leavers whose access was never removed, so a former employee can still sign in. An unused admin account is the biggest risk: it has wide access to people's records and nobody would notice if it were misused. Dormant learners also skew compliance numbers and may cost licences.
How it works
List active accounts with their last login and access level, decide which are no longer needed, then deactivate them or reduce their permissions. Many security standards expect this to happen regularly.
Common pitfalls
Only reviewing learners and forgetting admins and team leaders, who matter most. And deactivating the account that owns your integrations' API key.