Deloitte Interview Question

How you would proceed with user access review?