> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Choosing Account or Permission Access Reviews

> Decide between an Account-First review of whole accounts and a Permission-First review of each role, group, or license, and change it in App Review Settings.

When you go to configure your access review, you'll see a drop-down option:

<Frame>
  <img src="https://mintcdn.com/lumos-primary/f7twv2B37KFondZp/images/kb/access-reviews/preparing-and-completing-an-access-review/choosing-account-or-permission-access-reviews/16ac447e1354-a50e2741-9673-4358-9f0a-7ff2814179582F1727892821130-.png?fit=max&auto=format&n=f7twv2B37KFondZp&q=85&s=0f965ab759baaac130a983e6c98f4bb3" alt="" width="1436" height="135" data-path="images/kb/access-reviews/preparing-and-completing-an-access-review/choosing-account-or-permission-access-reviews/16ac447e1354-a50e2741-9673-4358-9f0a-7ff2814179582F1727892821130-.png" />
</Frame>

Or when you click Continue Review you may see this confirmation modal (where you'll be able to "save" the default based on app to help with future reviews):

<Frame>
  <img src="https://mintcdn.com/lumos-primary/f7twv2B37KFondZp/images/kb/access-reviews/preparing-and-completing-an-access-review/choosing-account-or-permission-access-reviews/a9af3c9ffd25-a50e2741-9673-4358-9f0a-7ff2814179582F1727892821965-.png?fit=max&auto=format&n=f7twv2B37KFondZp&q=85&s=23ac695fb850620a4d455048f9ab5eef" alt="" width="518" height="337" data-path="images/kb/access-reviews/preparing-and-completing-an-access-review/choosing-account-or-permission-access-reviews/a9af3c9ffd25-a50e2741-9673-4358-9f0a-7ff2814179582F1727892821965-.png" />
</Frame>

This is asking you to configure whether you want to do an Account-First or Permission-First review. Not sure which one to choose? Let's dive in.

**Account-based Access Review**:

Reviewers decide whether a user should keep their **account** on an app (yes/no). The review unit is the user's account on an app. The reviewer sees the user and their account status and decides to approve or reject the entire account.

**Permission-based Access Review**:

Reviewers decide at the **individual permission / entitlement level**. Each role, group, or license assigned to a user is reviewed separately. The reviewer can approve some permissions and reject others for the same user on the same app.

## When should I do an Account-First review?

* You are reviewing whether or not someone should have access to an app.
* You're reviewing a simple application with a single/very few permissions.
* This is likely a corporate application.

## When should I do an Permission-First review?

* You are reviewing on a permission basis. You want to review whether someone's specific level of access.
* You're reviewing a complex application where it's common for a user to have multiple permissions.
* You want to delegate your reviewers based on permission (ex: Abby reviews Permission A, Bob reviews Permission B, etc)
* This is likely a sensitive/developer application.

## That was easy, wasn't it?

If you accidentally configured Account-First and meant to configure it as Permission-First, you can edit this by clicking "App Review Settings":

<Frame>
  <img src="https://mintcdn.com/lumos-primary/f7twv2B37KFondZp/images/kb/access-reviews/preparing-and-completing-an-access-review/choosing-account-or-permission-access-reviews/5916f3e83b4d-a50e2741-9673-4358-9f0a-7ff2814179582F1727892822419-.png?fit=max&auto=format&n=f7twv2B37KFondZp&q=85&s=67bfdbd9fda5f87679f7782f425ea583" alt="" width="366" height="383" data-path="images/kb/access-reviews/preparing-and-completing-an-access-review/choosing-account-or-permission-access-reviews/5916f3e83b4d-a50e2741-9673-4358-9f0a-7ff2814179582F1727892822419-.png" />
</Frame>
