> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Choosing Account or Entitlement Access Reviews

> Decide between an Account-First review of whole accounts and an Entitlement-First review of each role, group, or license, and change it in App Review Settings.

When you go to configure your access review, you'll see a drop-down option:

![](https://mintcdn.com/lumos-primary/f7twv2B37KFondZp/images/kb/access-reviews/preparing-and-completing-an-access-review/choosing-account-or-permission-access-reviews/16ac447e1354-a50e2741-9673-4358-9f0a-7ff2814179582F1727892821130-.png?fit=max\&auto=format\&n=f7twv2B37KFondZp\&q=85\&s=0f965ab759baaac130a983e6c98f4bb3)

Or when you click Continue Review you may see this confirmation modal (where you'll be able to "save" the default based on app to help with future reviews):

![](https://mintcdn.com/lumos-primary/f7twv2B37KFondZp/images/kb/access-reviews/preparing-and-completing-an-access-review/choosing-account-or-permission-access-reviews/a9af3c9ffd25-a50e2741-9673-4358-9f0a-7ff2814179582F1727892821965-.png?fit=max\&auto=format\&n=f7twv2B37KFondZp\&q=85\&s=23ac695fb850620a4d455048f9ab5eef)

This is asking you to configure whether you want to do an Account-First or Entitlement-First review. Not sure which one to choose? Let's dive in.

**Account-based Access Review**:

Reviewers decide whether a user should keep their **account** on an app (yes/no). The review unit is the user's account on an app. The reviewer sees the user and their account status and decides to approve or reject the entire account.

**Entitlement-based Access Review**:

Reviewers decide at the **individual entitlement level**. Each role, group, or license assigned to a user is reviewed separately. The reviewer can approve some entitlements and reject others for the same user on the same app.

## When should I do an Account-First review?

* You are reviewing whether or not someone should have access to an app.
* You're reviewing a simple application with a single/very few entitlements.
* This is likely a corporate application.

## When should I do an Entitlement-First review?

* You are reviewing on an entitlement basis. You want to review whether someone's specific level of access.
* You're reviewing a complex application where it's common for a user to have multiple entitlements.
* You want to delegate your reviewers based on entitlement (ex: Abby reviews Entitlement A, Bob reviews Entitlement B, etc)
* This is likely a sensitive/developer application.

## That was easy, wasn't it?

If you accidentally configured Account-First and meant to configure it as Entitlement-First, you can edit this by clicking "App Review Settings":

![](https://mintcdn.com/lumos-primary/f7twv2B37KFondZp/images/kb/access-reviews/preparing-and-completing-an-access-review/choosing-account-or-permission-access-reviews/5916f3e83b4d-a50e2741-9673-4358-9f0a-7ff2814179582F1727892822419-.png?fit=max\&auto=format\&n=f7twv2B37KFondZp\&q=85\&s=67bfdbd9fda5f87679f7782f425ea583)