Get Started with Agentic Access Reviews

Last updated: March 4, 2026

Reviewers can find Access Reviews manual, repetitive, and time consuming. They also often lack context to make the right decisions leading to rubber stamping and compliance risks.

Agentic UARs are here! Reviewers will now see recommended access review decisions with clear rationale, so they can focus only where human judgment is needed.

With this new experience, Reviewers will be able to make more accurate decisions and move through the review quicker.

Video Walkthrough

How It Works

Lumos' AI agent, Albus, looks across your identities, apps, accounts, entitlements, policies, access reviews, organizational structure, SoD rules, and much more to determine if someone's access is appropriate and why or why not.

Agentic UARs is only available for Permission-based Reviews

Reviewers will see:

  1. AI suggested decision: Albus makes an Accept or Reject recommendation on each account or entitlement being reviewed. For decisions where more information is needed, Albus recommends Review for the Reviewer to make the final determination.

  2. AI review insights: Albus explains why the decision was made via an Insight category and accompanying detailed insights. Details on Insight categories and how they are generated:

Insight Category

How Albus decides on this category

Terminated

When an employee is no longer employed at the company

SoD violation

When an Segregation of Duties Policy violation is detected

Birthright

If an employee has been granted access via a policy

Approved Access

When a valid access request granted access

Overprivileged

When an employee's access is too privileged for their role

Inactive

When an employee has been inactive in the app

Unusual Access

When an employee's access is not appropriate for their role

Role Aligned

When an employee's access is appropriate for their role

Non Human

This is a service account or non-human identity

Enabling Agentic UARs in Your Review

AI Insights are enabled by default for Permission-based Access Reviews. You can enable/disable them at the Campaign and at the individual Access Review level. These setting will only affect unlaunched Access Reviews.

Enabling/Disabling Agentic UARs at the Campaign Level

  1. Navigate to a Campaign

  2. Click on Edit Default Review Settings

    image.png

  3. Toggle AI insights on or off

    Screenshot 2026-02-26 at 6.17.24 PM.png

    Notes: Enabling or Disabling will only impact unlaunched Permissions-based Access Reviews

  4. View AI Insights icon for Access Reviews with AI insights enabled

    image.png

Enabling/Disabling Agentic UARs for a specific Access Review

  1. Navigate to a specific Access Review

  2. Open on Access Review Settings

    image.png

  3. Enable/Disable AI insights for this Access Review

    image.png

Enabling/Disabling AI Insights in Auditor Reports

  1. Navigate to Access Reviews Settings

    image.png

  1. Enable/Disable AI insights in Auditor Reports

    image.png

  2. This setting will affect all Auditor Reports.

    1. Generating a report when this setting is enabled will include AI insights if they were enabled at any time for a Review

    2. Generating a report when this setting is disabled will not include AI insights

  3. View AI insights in the Auditor Report

    image.png