Understanding Review Assist

Public preview: The Marketplace app is available to select accounts. Contact your Immuta representative for details.

AI-powered feature

What is review assist?

Review assist is a calculated recommendation for determinations on access requests. It monitors access request determinations made by humans (your data stewards), and finds trends. Then, based on those trends, it will recommend for an access request to be approved, temporarily approved, or denied.

When finding trends, it looks across factors that determine access approvals, temporary approvals, or denials:

1. The data product itself; trend tracking is per data product

2. Metadata about the requestors, such as the groups and attributes they possess

An AI-generated justification for the decision will accompany the recommendation and pre-populate in the access request response to submit with the access determination. This AI-generated justification is based on the trends across the factors listed, as well as prior human-entered justifications. For temporary approvals, review assist also considers past temporary approvals to determine the recommended duration.

The review assistant provides a risk score to instill confidence and will show a low risk for determinations that align well with the trend. The risk will increase in severity the more differences it detects between the user requesting access and the previous determinations that were made.

• Low: The user has attributes or groups that align well with trends of other determinations and similar users were likely to be granted access. The review assistant is confident in the recommendation.

• Moderate: The user may have some attributes or groups that were within the trends of other determinations, but similar users were both approved and denied. The review assistant is less confident in the recommendation.

• High: The user does not have attributes or groups that were found in the other determinations and the review assistant cannot make a determination based on those trends.

What does review assist do?

Here is an example that considers the factors: the data product and the user metadata.

Past requests for data product: Company data

User	User's group(s)	Determination	Justification
Anna	Interns	DENY	Interns can't see this data
Bob	Interns	DENY	Can't share with temporary employees
Chris	Managers	APPROVE	Fine for managers
Dale	Engineers & Interns	DENY	Not appropriate for interns
Erin	Interns	DENY	Intern
Fran	Engineers	APPROVE	Engineering initiative requires it
Grace	Marketing	APPROVE	Not using for direct targeting
Hank	Accounts payable	APPROVE	Required for payments
Zeke	Engineers	APPROVE	Engineering initiative

Denials appear to be strongly correlated with being in the Intern group (and approvals are correlated with not being in the Intern group).

Now we have a new request for data product Company data:

User	Group(s)	Determination	Justification
Clete	Sales	PENDING

Review assist would recommend to approve this request since Clete is not in the Intern group. So the data steward would see this recommendation, along with an AI-generated justification: Your request is considered LOW risk because a high percentage of users with similar characteristics have been granted access, and there are no clear reasons to deny this request based on past approval decisions.

These recommendation details help the steward understand why his request should be appropriate to approve. Since they’re based on past data stewards’ similar determinations, the steward can feel confident in their approval decision. Once approved, Clete will automatically be provisioned the data in the data platform and can query it immediately.

The steward can disagree with review assist's recommendation if this is a unique user. They simply need to change the determination and edit the justification.

When can I use review assist?

Review assist will automatically appear on access requests when available. This will be whenever a trend is detected and could require more than 7 human-managed determinations.

If it has enough determinations, but a trend is not clear, it will recommend a temporary approval. This temporary approval will be recommended for a duration matching previous determinations or a reasonable default if no previous determinations are available.