Skip to main content
Reviewers can find Access Reviews manual, repetitive, and time consuming. They also often lack context to make the right decisions leading to rubber stamping and compliance risks. With Agentic UARs, Reviewers see recommended Access Review decisions with a clear rationale, so they can focus on the items that need human judgment and make more accurate decisions.

​
Video Walkthrough

​
What the video covers

The walkthrough follows a Reviewer through one app (Datadog) in a SOX audit campaign. Lumos adds two columns to the review table: AI Suggest, with the recommended decision, and AI Review Insights, with the reason for it. The suggested way to work through a review:
  1. Start with the Reject suggestions. Check each one against its insight, such as Terminated, and reject the access if you agree.
  2. Work through the Review suggestions. These are the ones Albus flagged for human judgment, like Inactive, Overprivileged, or Unusual Access. Take similar cases together, such as all the Inactive ones. You can accept a non-human account flagged for review if it’s expected.
  3. Scan the Accept suggestions. Approved Access means the person got this entitlement through an approved AppStore request, so it needs little attention. Role Aligned means the access fits the person’s role.
  4. Complete the review.
Because you only spend real time on the Review decisions and confirm the rest, reviews move faster and rubber-stamping goes down.

​
How It Works

Lumos’ AI agent, Albus, looks across your identities, apps, accounts, entitlements, policies, access reviews, organizational structure, SoD rules, and much more to determine if someone’s access is appropriate and why or why not. Reviewers will see:
  1. AI suggested decision: Albus makes an Accept or Reject recommendation on each account or entitlement being reviewed. For decisions where more information is needed, Albus recommends Review for the Reviewer to make the final determination.
  2. AI review insights: Albus explains why the decision was made via an Insight category and accompanying detailed insights. Details on Insight categories and how they are generated:

​
Enabling Agentic UARs in Your Review

AI Insights are enabled by default for Access Reviews. You can enable/disable them at the Campaign and at the individual Access Review level. These setting will only affect unlaunched Access Reviews.

​
Enabling/Disabling Agentic UARs at the Campaign Level

  1. Navigate to a Campaign
  2. Click on Edit Default Review Settings
    image.png
  3. Toggle AI insights on or off
    Screenshot 2026-02-26 at 6.17.24 PM.png
    Notes: Enabling or Disabling will only impact unlaunched Access Reviews
  4. View AI Insights icon for Access Reviews with AI insights enabled
    image.png

​
Enabling/Disabling Agentic UARs for a specific Access Review

  1. Navigate to a specific Access Review
  2. Open on Access Review Settings
    image.png
  3. Enable/Disable AI insights for this Access Review
    image.png

​
Enabling/Disabling AI Insights in Auditor Reports

  1. Navigate to Access Reviews Settings
    image.png
  2. Enable/Disable AI insights in Auditor Reports
    image.png
  3. This setting will affect all Auditor Reports.
    1. Generating a report when this setting is enabled will include AI insights if they were enabled at any time for a Review
    2. Generating a report when this setting is disabled will not include AI insights
  4. View AI insights in the Auditor Report
    image.png