Skip to main content

Background

Okta groups are often set up to grant access to multiple apps at once. This article explains what Lumos removes when someone rejects a group or an account that gets access through a group in an Access Review.

The scenarios

You reject the group
  • If you reject the group, then the account is removed from that group entirely.
You reject the account
  • If you reject the account and the access is granted by a group, then Lumos makes sure the account doesn’t lose access to other apps granted by the same group.

Additional scenarios

I’m doing a permissions-based review?

The user will be completely removed from any rejected permissions.

I have an Okta group that’s SCIM-enabled — will Lumos remove the account?

Lumos will remove the person