Understand Disable self-review
The Disable self-review option lets you allow or restrict self-reviews for campaigns. This can depend on the criticality or sensitivity of the resources that are in the campaigns. This option is enabled by default for campaigns that review access to admin roles. When a campaign has self-reviews disabled, you can't approve, revoke, or reassign your own review item. This option is enabled by default for campaigns that review access to admin roles.
If the Disable self-review checkbox is selected for a campaign and the user and reviewer (who will be assigned the review) happen to be the same person, then at the time of campaign launch, Okta assigns the review to a different reviewer depending on the reviewer type:
-
Manager, Group owner, or Custom: Okta assigns that review item to the fallback reviewer. If the fallback reviewer is deactivated, doesn't exist in Okta, or is the reviewer for their own review item, Okta assigns the review to the person who created the campaign.
If there are two or more group owners as reviewers, Okta assigns that review item to other group owners who aren't the user.
-
User: Okta assigns that review item to the person who created the campaign.
-
Group: Okta assigns that review item to other members of the group who aren't the user. If the group only has one member and that person is also the user in the campaign, Okta assigns the review to the person who created the campaign.
The campaign fails to launch if Okta assigns the review item to the person who created the campaign and any of the following conditions are met:
-
The user who created the campaign doesn't exist in Okta.
-
The user who created the campaign is the reviewer for their own review item.
When a campaign has self-reviews disabled, you can't approve, revoke, or reassign your own review item. This option is enabled by default for campaigns that review access to admin roles.