> ## Documentation Index
> Fetch the complete documentation index at: https://holder.docs.fiskil.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Phase 4: Consent dashboard and revocation

> Validate the CDR consumer consent dashboard and confirm that withdrawing a consent stops data sharing.

In the final phase, you sign in to the consumer **consent dashboard** as each persona, review their consents, and withdraw one to confirm data sharing stops.

> [!NOTE]
>
> **Prerequisite:** Complete [Phase 1](https://holder.docs.fiskil.dev/api-reference/cdr/testing/consent-authorisation.md) so each persona has at least one active consent.

***

## Access the consent dashboard

The consent dashboard is hosted at a separate URL from the UAT environment and the consent authorisation screens:

| Environment | Consent dashboard URL |
| - | - |
| UAT | `consent.cdr.staging.<your-domain>` |
| Production | `consent.cdr.<your-domain>` |

Replace `<your-domain>` with the domain configured for your Data Holder.

***

## What to validate

**1. Sign in as a persona**

Sign in to the consent dashboard with a persona's email address.

> [!TIP]
>
> The persona receives a branded email with a one-time password (OTP), and can sign in with it.

**2. Review active consents**

Confirm the dashboard lists every consent with a status of **Active**, and that each consent shows:

* The name and logo of the ADR the consent was given to
* The consent period
* When the consent was created and when it expires
* The data (scopes) shared under the consent
* The accounts shared under the consent
* An option to withdraw the consent and stop sharing data

**3. Withdraw a consent**

Select a consent and choose **Stop sharing**.

> [!TIP]
>
> The consent no longer shows as active in the consent dashboard.

**4. Confirm the ADR was notified**

In the Mock Data Recipient, request data with the CDR arrangement you just withdrew.

> [!TIP]
>
> The request no longer returns data. Instead it returns a `403` error with the code `urn:au-cds:error:cds-all:Authorisation/RevokedConsent`.

> [!TIP]
>
> Repeat this phase for each [test persona](https://holder.docs.fiskil.dev/api-reference/cdr/testing/test-personas.md). For Persona B, confirm the dashboard lists each shared account.

For how consumers and Data Holders can withdraw consents in production, see [Customer consents](https://holder.docs.fiskil.dev/api-reference/cdr/cdr-faqs.md#customer-consents) in the CDR FAQs.

***

## Next steps

You have completed all four test phases. If you found any defects, [report them in the Fiskil Console](https://holder.docs.fiskil.dev/api-reference/cdr/testing/reporting-defects.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.