In general, the Identity Manager access review workflow:
Constructs a list of users, gets account information for each user, and evaluates optional audit policies
Creates user entitlement records
Determines if attestation is required for each user entitlement record
Assigns work items to each attestor
Waits for all attestors to approve, or for the first rejection
Escalates to the next attestor, if no response to a request is received within a specified timeout period
Updates user entitlement records with resolutions
See Access Review Remediation for a description of the remediation capabilities.