Uploading Evidence For an Access Review

Background

When you mark accounts as "Reject" or "Modify Access" in your Access Review, you may also need to upload evidence proving that the access was removed. This may be because: (1) Lumos has no way of automating the removal for this app, (2) you configured your Evidence Requirements to be Require for All Removals, or (3) automated removal failed.

Lumos currently supports evidence in .jpg. .jpeg, and .png file formats or a URL. If your evidence is in a different format, please read on to learn how you can link to it in the PDF report you generate in Lumos after you complete your review.

Steps

1. Navigate to the list of accounts/permissions that need evidence.

These accounts will have an "Evidence Required" tag associated with them.

2. Select the accounts/permissions to which you would like to associate the evidence.

You can click the checkbox to the left of the employee's name/email to select multiple, or do this one at a time.

3. Upload a screenshot or include a link in the "Add URL" text box.

4. Click "Save" to complete uploading the evidence.

5. Repeat this process for any remaining accounts that need to be reviewed.