> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Finish an Access Review and Generate the Audit Report

> Handle rejected accounts through automatic or manual removal after an Access Review, then generate the PDF audit report to send to your auditor.

## Background

After all accounts in your Access Review are approved or rejected, handle the rejected accounts and generate a report to send to your auditor. This article shows you how.

## Steps

### 1. Handle the rejected accounts

After you and your delegators approve or reject access for all users, an orange button becomes clickable on the top right, depending on the type of app. 

In a previous step, you configured the default removal method for the app.

If that was Manual, Lumos assumes you are conducting the removal yourself and does not automate removal.

If that was a deprovisioning webhook, Lumos runs the deprovisioning webhook for all the accounts you rejected.

For Suspend/Deprovision, this will depend on the source(s) on the app:

| | | |
| - | - | - |
| | Yes. **Is Okta delegated** | No. **Is not Okta delegated** |
| **Is a direct Lumos integration** | **Lumos will attempt to deprovision via Okta (assuming “restrictive” sign-in mode) and also deprovision or suspend via Lumos integration.** | **Lumos will deprovision or suspend via Lumos integration.** |
| **Is not a direct Lumos integration** | **This assumes that the account has a “restrictive” sign-in mode. Lumos will deprovision via Okta (e.g. remove the user from the application).** | **Deprovision will not be an option.** Lumos will request manual evidence for the user because there’s no way for Lumos to automate the removal process for the account. |

* **Automatic Removals**

  <Frame>
    <img src="https://mintcdn.com/lumos-primary/f7twv2B37KFondZp/images/kb/quick_start_guide/access_reviews/access_reviews_for_new_to_access_reviews_employees/completing-an-access-review/dc1d8672e99b-a50e2741-9673-4358-9f0a-7ff2814179582F1727892893807-.gif?s=4ce5a10ef923090087b827f16926cc02" alt="start_account_removal.gif" width="1712" height="978" data-path="images/kb/quick_start_guide/access_reviews/access_reviews_for_new_to_access_reviews_employees/completing-an-access-review/dc1d8672e99b-a50e2741-9673-4358-9f0a-7ff2814179582F1727892893807-.gif" />
  </Frame>

  For Okta delegated apps and direct integrations, you'll see a button that says "Start Account Removal". This is because Lumos can use your IdP and/or the direct Lumos integration to revoke access for rejected users.\
  **This process will abide by the removal method configured for that app in your Access Review.**

  Modify Access: For accounts marked as "Modify Access", Lumos will prompt you to upload evidence, similar to the Manual Removal workflow below.
* **Manual Removals**

  For manual/custom apps, you'll see a button that says "Start Manual Evidence Upload". This is because Lumos cannot use your IdP or the direct Lumos integration to revoke access, so you'll have to do this manually. You'll then be prompted to upload evidence, such as a screenshot.

  Afterwards, you'll be prompted to "Complete Review".

### 2. Generate your report

**Note:** You can generate this report even if your Access Review isn't completed yet.

This generates a PDF that includes all necessary timestamps and approvers, mark automated removals, and include the evidence you attached.

Navigate to the top level review and click "Generate Report" at the top right.

Once generated, you'll see a button that appears that says "View Report".

The generated report will have a line-by-line breakdown of all approvals and rejections, and timestamps of when it was reviewed and when access was automatically removed.

If you uploaded evidence, you'll see it attached at the end of the report.

<Frame>
  <img src="https://mintcdn.com/lumos-primary/f7twv2B37KFondZp/images/kb/quick_start_guide/access_reviews/access_reviews_for_new_to_access_reviews_employees/completing-an-access-review/0209da2276fb-a50e2741-9673-4358-9f0a-7ff2814179582F1727892896465-.png?fit=max&auto=format&n=f7twv2B37KFondZp&q=85&s=10f027e4ec2775df68f90a7013981c78" alt="mceclip0.png" width="1268" height="870" data-path="images/kb/quick_start_guide/access_reviews/access_reviews_for_new_to_access_reviews_employees/completing-an-access-review/0209da2276fb-a50e2741-9673-4358-9f0a-7ff2814179582F1727892896465-.png" />
</Frame>

### 3. \[Optional] Send that report to your auditor, or upload it into your auditing software.

### 4. Review complete