PX-GDE-08 · LMS · Part 11 Access
Training-gated GxP access and reviews on ServiceNow.
Granting production GxP roles before SOP curricula are completed—or leaving privileged accounts active after employees change roles—remains one of the most frequent FDA Form 483 and EU Annex 11 citations. ProcessX by USDM Life Sciences connects ServiceNow access requests to your LMS before provisioning, triggers review or revocation when training lapses, and replaces spreadsheet user access reviews with Part 11-signed ServiceNow attestations.
- PRE-PROVISIONBlocked if untrainedServiceNow verifies required LMS curriculum completion for the requested GxP role before IAM or manual fulfillment runs
- SOD GUARDRAILConflict-checked grantSegregation-of-duties checks prevent users from combining conflicting system admin, execution, and Quality approval roles
- LAPSE & MOVERContinuous enforcementExpired SOP training, department transfers, or HR offboarding events automatically trigger access review or role revocation
- PERIODIC UARSigned on recordReplaces emailed CSV spreadsheets with scheduled ServiceNow user access reviews sealed by Part 11 electronic signatures
- CLOSED LOOPZero orphan tasksPeriodic access reviews cannot be signed closed until every flagged account removal is executed and verified complete
Where IT identity tickets and Quality training records fall out of sync.
Nearly every regulated life sciences company already owns an identity provider, a ServiceNow service catalog, and a validated Learning Management System (LMS). Yet access findings top inspection letters year after year because those systems act independently: an employee requests a production LIMS or MES role in ServiceNow, a line manager clicks approve, and IT provisions the account—assuming the user has finished or will soon finish their assigned SOP curricula.
During an inspection, auditors request a simple join: compare account creation and privilege-elevation timestamps from the GxP system against curriculum completion timestamps from the LMS, alongside HR transfer and termination dates. Even a 24-hour gap where production write access preceded training completion, or a transferred analyst who retained lab-approver rights, exposes every record touched by that user to data-integrity questions.
Provisioning ahead of SOP completion (21 CFR 211.25 & §11.10(i))
Fulfilling an access ticket on manager approval alone lets untrained personnel log into validated production environments hours or days before finishing required curricula.
Unflagged training lapses and major SOP revisions
When annual retraining expires or a critical work instruction undergoes a major effective revision, existing system accounts remain active with zero signal back to IT or the System Owner.
Internal mover privilege accumulation (§11.10(g))
HR offboarding feeds disable corporate SSO when employees leave the company, but internal promotions or department transfers leave legacy GxP roles stacked onto new duties.
Spreadsheet user access review theater (Annex 11 §12)
Exporting user rosters to Excel, collecting email approvals from busy System Owners, and filing PDFs routinely leaves "revoke" rows unexecuted in the target application.
Verifying qualification before access—and revoking it when state changes.
ProcessX by USDM Life Sciences turns ServiceNow into the active enforcement bridge between your LMS, your HR/IAM identity sources, and your validated GxP systems. Embedded USDM engineers configure a governed role-to-curriculum matrix tied directly to each Application Service in your ServiceNow CMDB, deploying your first regulated ITSM and access workflows in 6–12 weeks.
When a requester submits a GxP access request, ProcessX queries your connected LMS for the exact curriculum required by that system and role, blocks fulfillment until training is verified current, checks segregation-of-duties rules, captures System Owner and Quality approvals where required, and stamps an immutable snapshot of training proof onto the provisioning record before IAM automation or manual fulfillment proceeds.
- ROLE MATRIXMaps each GxP Application Service role to required LMS curriculum codes, SoD rules, and approval authoritiesGoverned role catalog
- LMS GATEQueries connected LMS completion status at request time, holds fulfillment if incomplete, and preserves proof on recordPoint-in-time proof
- SOD & QA SIGNBlocks conflicting admin-plus-approver duties and requires Part 11 e-signatures on privileged GxP access grantsAuthority verified
- DRIFT TRIGGERSIngests LMS overdue notifications and HR role-change events to open time-boxed re-qualification or revocation tasksAutomated revocation
- ATTESTATIONSchedules risk-tiered user access reviews with line-item retain/revoke decisions and verified de-provisioning holdsPart 11 attested
Example · Quarterly GxP user access review record
An illustrative quarterly user access review for a validated manufacturing execution service in ProcessX: 142 active accounts were reconciled against HR and LMS feeds, 4 transferred or training-lapsed accounts were revoked with verified tasks, and Quality signs the final attestation.
Part 11 e-signature attesting reconciled production role roster
Inspection only. The example record and its signature state stay unchanged.Answering the auditor’s timestamp test in minutes, not days.
When an inspector pulls a random sample of 20 GxP users—mixing lab analysts, privileged administrators, contractors, internal transfers, and recently departed staff—your team should not have to stitch together LMS CSV exports, Active Directory logs, and archived emails. ProcessX keeps the qualification snapshot, approval chain, fulfillment timestamp, and periodic review history on one queryable ServiceNow trail.
Technical access controls enforced by ProcessX
- C1Pre-provisioning LMS verification gate blocking role assignment until required training status returns complete and current
- C2Scoped role-segregation checks preventing requester self-approval and incompatible operational-versus-Quality privilege pairs
- C3Completion gate on periodic user access reviews blocking final attestation while any child revocation task remains open
- C4Re-authenticated, hash-chained 21 CFR Part 11 electronic signatures on privileged grants and periodic review sign-offs
Audit records retained inside ServiceNow
- E1Chronological, immutable timestamp chain proving LMS curriculum completion preceded role approval and provisioning
- E2Bound snapshot of curriculum IDs, training completion dates, and signer meaning on every GxP access request
- E3Line-item periodic review dispositions linked directly to closed IAM connector runs or verified manual removal evidence
- E4Queryable user-by-CI access ledger spanning grant, periodic attestations, role modifications, and final revocation
Questions teams ask during validation and inspection
Which Learning Management Systems (LMS) can ProcessX check before provisioning GxP access?
ProcessX connects on ServiceNow to enterprise life sciences LMS platforms—such as Veeva Vault Training, Cornerstone OnDemand, SAP SuccessFactors Learning, and UL ComplianceWire—using standard APIs or scheduled status feeds. USDM engineers wire your role-to-curriculum mappings into ProcessX so qualification checks happen automatically inside the request workflow.
Can ProcessX govern access for legacy lab or manufacturing systems that are not connected to Okta or Entra ID?
Yes. Many validated LIMS, chromatography data systems, and shop-floor MES tools still rely on local application accounts administered manually by system custodians. ProcessX enforces the exact same LMS training gate, segregation-of-duties check, and Part 11 approval first, then routes a controlled fulfillment task requiring custodian verification evidence before closing.
What happens during a periodic user access review when a System Owner marks an account to be revoked?
Selecting revoke or modify on a review line item automatically spawns a linked remediation task—either triggering automated IAM group removal or assigning a tracked manual removal task to the system administrator. ProcessX holds the parent user access review record open so the System Owner and Quality cannot apply final Part 11 closure signatures until every removal is verified complete.
How are time-bound vendor support or emergency elevated accounts handled on GxP systems?
ProcessX supports time-boxed privileged and vendor support access tied to an approved change or GxP incident record, complete with mandatory expiration timestamps. When the authorized window expires, ServiceNow automatically triggers de-provisioning and logs verification for Quality audit-trail review.
Workflow products that enforce these controls
Pre-built starting points configured and validated on your ServiceNow instance by USDM engineers.
- Regulated ITSMValidated change, GxP incident, CMDB/CSDM governance, and training-gated access and review — governed and evidenced.
- Validated stateApplicability assessment, periodic and audit trail review, GxP standard change, and an app validated on every release.
Related technical guides.
- Part 11 · Annex 1121 CFR Part 11 and EU Annex 11 controls on ServiceNow
- Annex 11 §9 & §11 · ReviewsScheduled periodic evaluation and Annex 11 audit-trail review on ServiceNow
- Scoped Architecture · ITSMRunning GxP and non-GxP ITSM together on a single ServiceNow instance
- SecOps · GxP Data IntegrityWhen a security event becomes a GxP event: uniting SecOps and Quality on ServiceNow
- Full libraryBrowse all 26 technical guides by topic cluster
Close LMS-to-access gaps on your validated systems.
Bring a GxP system whose user access reviews still run in Excel today. We will map the LMS training gate, role matrix, and Part 11 attestation directly in ServiceNow.
or email processx@usdm.com