Assigning Reviewers and Launching Your Access Review

Background

You've picked out your apps and now move into the first step -- Assign.

It's time to designate who is going to accept or reject account access/permissions for each app. 

Steps

1. Select your account(s)/permission(s) and then select your assignee(s)

Don't know if Jane Doe needs access to this app? Delegate the approval to someone who does! 

If you want to assign a single account, you will see a "+" sign in the Access Review:

You can then type in the assignee(s) you wish to approve/reject this account. We support a series of quick selections including: Assign to App Admins, Manager and/or Myself. These options appear depending on if you have set up app admins and managers in Lumos AppHQ. 

If you assign multiple users or a group, any one of the assigned users can take action on the account. 

Upon assigning, you'll see that they move from the "Unassigned" tab to the "Assigned" tab. 

If you want to assign in bulk, you can use the select all checkbox or multiple check boxes on the left side, and click the "+" sign at the top:

Type in the assignee(s), and click Save.

2. Hit "Launch Review..."

In the modal that pops up you can add any instructions or context that your assignees may need to know to conduct their review. Feel free to add links to Jira tickets, Confluence pages, etc. if they need additional instructions!

3. Click "Launch" - your assignees have been notified! 📣

Assigness will be notified via email and/or Slack to go and review the accounts, depending on your notification settings. Kick your feet up and let the assignees accept or reject away! 

Additional Notes & FAQs

1. I am the app reviewer and I'm the only one reviewing, do I still assign?

For now, yes, you should Select All Accounts and then assign it to yourself & then launch the review. We're working on making this experience more flexible, but even if it's an access review party of one, you'll still need to go through the Assign & Launch step. 

2. 🚫 You cannot approve your own access

To enforce segregation of duties, you'll find that you cannot assign your own account to yourself to review. Please assign this to someone else! 🤝

If you are assigned to your own account as part of a group, Lumos will still not allow you to review your own access. 

3. Oops! I accidentally assigned this to the wrong person!

Click on the "Assigned" tab at the top, click on the account(s) in question, and you'll find that you can re-assign them!