> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using Lumos for Access Reviews

Lumos provides the tools to conduct routine Access Reviews for all your apps. Lumos replaces Excel and Google Sheets and removes the need to chase down app owners and approvers.

## Why should I conduct Access Reviews in Lumos?

* Lumos provides one place to store and conduct all your Access Reviews.
* Lumos lists all your apps and the employees who have access.
* Lumos already has your employee data from your user sources (e.g. GSuite, O365, Okta), so it compares your list of users against your source of truth to surface terminated and unmatched users.
* You can delegate approvals to managers or other key people at your organization, and they're automatically notified to accept or reject access.

  * Lumos also sends reminders if an Access Review is still open.
* You can leave notes to provide additional context for your review, including the reasoning for accepting or rejecting access.
* Lumos can automatically remove access after you reject users. For apps where Lumos doesn't support automated removal, Lumos prompts you to attach evidence.
* Lumos generates an auditor-ready PDF report.

## What does this process look like?

### 1. Select the apps that you want to include in your review (\<5 minutes)

This will determine the scope of your access review. Which apps are you looking to review, and who is the reviewer for each app?

### 2. Assign your Reviewers and launch (\~5 minutes)

Delegate the responsibility of approval to Reviewers, such as one individual or managers. You can assign in bulk and include helpful context when launching your review.

### 3. Accept or reject access (\~30 minutes)

Next, accept or reject access for every user who currently has access to those applications. If you want to modify an account (rejecting a particular permission), you can do so in the review. You may also leave notes during this process which may come in handy in the final report.

### 4. Remove access, either automatically or manually (1-15 minutes)

After all accounts have been reviewed, handle the rejected accounts. You'll have the option to automatically remove or upload evidence, depending on the app. You can also modify access, which means you intend to adjust the level of permission without actually removing the user's access.

### 5. Complete your review (30 seconds)

Click "Complete Review" to lock in your review and officially mark it as completed.

This action is irreversible.

### 6. Generate your report (30 seconds)

Click a button to generate a PDF to send to your auditor or store for safekeeping.

## Where do I get started?

The following articles cover each step.

1. How To: Add Apps to an Access Review:[Choosing Access Review Apps](/kb/access-reviews/preparing-and-completing-an-access-review/choosing-access-review-apps)

2. \[Optional] How to: Add a Custom App to Lumos: [Adding a custom app](/kb/identities/custom-apps/adding-a-custom-app)

3. How to: Conduct Your Audit: [Reviewing Access](/kb/access-reviews/preparing-and-completing-an-access-review/reviewing-user-access-in-lumos)

4. How to: Complete Your Access Review: [Completing an Access Review](/kb/quick_start_guide/access_reviews/access_reviews_for_new_to_access_reviews_employees/completing-an-access-review)
