Skip to main content

 Identities

Identity to Account Correlation Admins can now define flexible rules for how Lumos matches external accounts to Identities. This helps during domain migrations, formatting changes, or when systems rely on usernames or immutable IDs instead of emails. With this update, you can:
  • Select matching attributes like email, username, or unique ID.
  • Transform fields with Lumos Expressions before comparison.
  • Set layered rules (e.g., match by email first, then fallback to username).
This ensures more reliable identity matching, improving access reviews and offboarding accuracy.
identity.gif
If you’d like this feature enabled, reach out to your Lumos point of contact for more information. Help Center Article

Access Reviews

Permission Descriptions in UARs Instead of cryptic permission names like AWS-538697941105-AAD-platformengineers, you can now bulk-manage permission display names, descriptions, and owners - either by syncing from AD or uploading a CSV. Descriptions appear directly in Access Reviews and Auditor reports, giving reviewers context and reducing audit risk.
uars.png
Help Center Article

Analytics

Persistent Table Views Tired of re-applying the same filters every time you open the Apps table? Now you can save, share, and set default table views with your preferred filters and column configurations. Whether it’s “Apps Pending Review” or “High-Risk Apps,” your go-to view is just one click away.
Table Views.gif
Help Center Article

AppStore

Slack Access Requests Requesting access just got faster. Employees can now use /access [app] directly in Slack. Lumos checks your access policies and either auto-approves the request or routes it for one-click approval - no tickets, no delays. IT gets the audit trail, employees get access in minutes. Help Center Article

 Lifecycle Management

Mover Grants [Beta] With Mover Grants, Lumos automatically re-runs access policies when an employee changes department, role, or worker type. Add optional delays, notifications, or approvals to match your workflows - keeping transitions smooth and compliant. This feature is currently in Phase 1 of rollout, on its way to wider scale availability. Reach out to your Lumos point of contact for more information.
movers.png
Help Center Article

Integrations

Integration Wave 4 Releases Lumos has expanded its connector library with new ICS-style integrations supporting account lifecycle management (create, delete, activate/deactivate) and entitlement assignments. This month’s additions: Lumos has also expanded support for the following, existing integrations:
  1. Google Workspace - Reach out to support to enable these features.
    1. Update Account
    2. Assign / Unassign Entitlements
  2. Office365 - No reconnection required, automatic improvement.
    1. Sync EntraID roles
    2. Create Account
    3. Update Account
    4. Assign / Unassign Entra ID roles