What must a source have to enable Sub-Admin review certification?

• A. A scheduled access review
• B. A governance group assigned to it
• C. An approval process defined
• D. A user notification system in place

Answer: (B)

For Sub-Admin review certification to be enabled for a source, it is essential that the source has a governance group assigned to it. Governance groups play a critical role in the management and oversight of access certifications. They help define the responsibilities of users within the organization regarding identity governance, including who can perform reviews and how these reviews are conducted.

When a governance group is assigned to a source, it ensures that there are defined roles and responsibilities among users involved in the review process. This allows the Sub-Admin to have the necessary authority and framework to oversee certification reviews effectively, ensuring compliance and proper access controls are upheld. In essence, it is the governance group that provides the structure for the review process to take place.

On the other hand, the other options do not directly allow or enable Sub-Admin review capabilities. While a scheduled access review might be a part of the overall governance process, it does not inherently enable Sub-Admin reviews. An approval process, although important for managing changes, does not specifically pertain to whether a source can have Sub-Admin reviews enabled. Finally, a user notification system, while useful for communication, is not a requirement for enabling certification review.