Risk Holds

Risk Holds is no longer a standalone admin screen. This page explains where that review has moved to and where held provisioning still exists behind the scenes.

Where risk review happens now

1. For access requests: an approver already makes a human decision, so a HOLD-level risk no longer creates a separate queue item afterward. Instead, the approver sees the calculated risk — "Risk if granted: score · level" — directly on the request before deciding. See Access Requests.
2. For access certification: a reviewer deciding whether to revoke sees "Risk if revoked: score · level" on the item itself. See Access Certifications.
3. A BLOCK-level risk still hard-stops provisioning everywhere, including access requests — that behavior is unchanged.