> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Kicking off Removals during the Review Stage

## Background

Some auditors require SOX organizations to guarantee that rejected access is removed within 24-48 hours of the review decision. To support this requirement, Lumos can run review decisions and access removals in parallel.

## Enabling Automated removals

* Firstly in order to enable kicking off removals after a set time, you can select *Edit Default Review Settings* in the main Access Reviews settings.\\
  <Frame>
    <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/access-reviews/preparing-and-completing-an-access-review/kicking-off-removals-during-the-review-stage/374a8536d6be-a50e2741-9673-4358-9f0a-7ff2814179582F1727892390586-.png" alt="Screenshot 2024-06-25 at 2.19.18 PM.png" />
  </Frame>
* You can then enable "Start Automated Removals" \\
  <Frame>
    <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/access-reviews/preparing-and-completing-an-access-review/kicking-off-removals-during-the-review-stage/5b1f0503f269-a50e2741-9673-4358-9f0a-7ff2814179582F1727892391188-.png" alt="Screenshot 2024-06-25 at 2.16.18 PM.png" />
  </Frame>
* You can configure the length of time after which removals are automatically completed. The timer starts the moment that a reviewer submits their review decision. The options are X hours or X days after the review decision. \\
  <Frame>
    <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/access-reviews/preparing-and-completing-an-access-review/kicking-off-removals-during-the-review-stage/6041bfbc7b43-a50e2741-9673-4358-9f0a-7ff2814179582F1727892391705-.png" alt="Screenshot 2024-06-25 at 2.17.41 PM.png" />
  </Frame>
* Click "Save Settings"

## How the workflow works

#### **Admin Experience**

* Upon launching the review, admins should see the tabs: Unreviewed, Pending Action and All Accounts
  * Unreviewed shows all unreviewed accounts across all reviewers. The admin can select the *Show My Tasks Only* filter to just see their pending review decisions.
  * Pending Action shows any accounts with pending auto-removals and/or requiring manual evidence upload.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/access-reviews/preparing-and-completing-an-access-review/kicking-off-removals-during-the-review-stage/fc72e00bf4ee-a50e2741-9673-4358-9f0a-7ff2814179582F1727892392222-.png" alt="Screenshot 2024-07-01 at 10.49.59 AM.png" />
</Frame>

* Admins can view the datetime of scheduled removal.  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/access-reviews/preparing-and-completing-an-access-review/kicking-off-removals-during-the-review-stage/b24f9a9b7041-a50e2741-9673-4358-9f0a-7ff2814179582F1727892392796-.png" alt="Screenshot 2024-07-01 at 11.00.40 AM.png" />

* * The bulk removal method is the default removal method defined on the main Apps to review page\
     <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/access-reviews/preparing-and-completing-an-access-review/kicking-off-removals-during-the-review-stage/98cd95702806-a50e2741-9673-4358-9f0a-7ff2814179582F1727892393480-.png" alt="Screenshot 2024-07-01 at 11.05.32 AM.png" />

* Admins can also update the removal method for an individual account\
  **<img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/access-reviews/preparing-and-completing-an-access-review/kicking-off-removals-during-the-review-stage/01be9bcb0978-a50e2741-9673-4358-9f0a-7ff2814179582F1727892395128-.png" alt="Screenshot 2024-07-01 at 10.55.56 AM.png" />**

* Admins can also choose to immediately remove any rejected accounts instead of waiting for the auto-removal timer.\\
  <Frame>
    <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/access-reviews/preparing-and-completing-an-access-review/kicking-off-removals-during-the-review-stage/fb29910388ba-a50e2741-9673-4358-9f0a-7ff2814179582F1727892395773-.png" alt="Screenshot 2024-07-01 at 11.06.41 AM.png" />
  </Frame>

#### **Reviewer Experience**

* Non admin reviewers should see review tabs: Unreviewed, Reviewed, All Accounts.
* Upon completing their assigned review decisions, reviewers should have all accounts moved from Unreviewed to the Reviewed tab.
* The status of their review is also updated to Completed.
* Reviewers should just see the review status as Approved/ Rejected/ Modified after their review decisions are completed.
  * Reviewers are NOT prompted to select removal options or upload evidence unless they are a Lumos admin or are assigned as a remover.

#### **Remover Experience**

* Users and/or groups can be assigned as removers in the review for manual apps.
* Removers should see the tabs: Unreviewed (if also a reviewer), Pending Action, All Accounts
* Removers are prompted to upload evidence.

## Automated Removals vs Manual Removals

* When you have enabled "Start Automated Removals", all rejected accounts are immediately moved to the Pending action tab.
* Automated removals follow the set time for removal to be completed.
* Manual removals are prompted immediately upon the rejection decision. The same applies to generating ITSM tickets.

## Audit Reporting

* Lumos provides the timestamp for the review decision in the *Reviewed on* column and the timestamp for the removal in the *Removal Method* column. <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/access-reviews/preparing-and-completing-an-access-review/kicking-off-removals-during-the-review-stage/b962c57d0235-a50e2741-9673-4358-9f0a-7ff2814179582F1727892396264-.png" alt="Screenshot 2024-07-01 at 1.59.49 PM.png" />
