Skip to main content

Situation

An account in my access review shows “Privileged” in the Category column (previously labeled “Admin Privileges”), but it’s not an admin in the app.

Solution

Lumos marks an account as Privileged when it holds at least one permission with the Privileged tag. Lumos auto-adds that tag to permissions whose name contains “admin” or “owner” (not case-sensitive), so a permission can be tagged even if it doesn’t grant admin rights in the app. When it assigns the category, Lumos skips code repository access permissions. To stop the account from showing as Privileged, remove the Privileged tag from that permission. See Adding Tags to Permissions.

Can I change this behavior?

Lumos can ignore permissions of type GROUP when it assigns the Privileged category, regardless of their names. Please reach out via Slack or email (support@lumos.com), and a member of the Lumos team can assist you in getting this updated.