Access Controls

Can anyone tell me exactly what a “Baseline Access Review” entails?

I assume its an audit of server and internal systems access lines… list of employee’s, their user levels/rights, etc.

Would this go further though to include the routers, etc.?

Thanks!
KW