Role mining

Score review

Rank live candidate roles by fit, coverage, and risk. This dashboard replaces the sample board with the current decision queue so analysts can keep scoring real bundles.

Live queue
Reviewed candidates Waiting for live candidate decisions.
Promote queue Waiting for live candidate decisions.
Refine queue Waiting for live candidate decisions.
Reject queue Waiting for live candidate decisions.
Review queue
Ranked role candidates

Review the strongest candidates first, then work down into bundles that need refinement or a challenge before validation.

Promotion ready Needs refinement Challenge queue
Candidate Score Coverage Risk Action Status Updated
Selected candidate
Loading live queue...

The review dashboard is loading current decisions from the live queue.

Entitlements in scope
Cohort users
Choose a candidate from the queue to start the live review flow.
Stage 5 — Score & Review

Turn generated candidates into a ranked review queue that analysts can defend, refine, and promote with confidence.

Score and Review is where raw role candidates become decision-ready proposals. Compare coverage, ownership fit, and policy risk side by side, then capture the review outcome that determines what moves forward to validation.

18 candidates awaiting action

Five candidates are above the promotion threshold, seven require scope refinement, and three should be challenged because entitlement overlap is still too broad for a clean operating role.

Top score 91 Finance Month-End Operator is leading the queue
Promote now 5 Low-risk candidates with clear owner alignment
Needs refinement 7 Candidates with good intent but excessive spread
Review confidence 84% Analyst consensus across the current shortlist

Scoring Snapshot

Weighted scoring balances entitlement coverage, cluster consistency, policy exposure, and analyst readiness before a role candidate moves to validation.

Top candidate ready for promotion
Lead candidate
91 Finance Month-End Operator leads the board after risk penalties and overlap adjustments.

The candidate keeps 82% of the target cohort in policy, limits SoD pressure to one challenge item, and already has a named business owner for sign-off.

Coverage fit 82%
Risk pressure Low
Owner readiness Confirmed
Exceptions 2
Promote 5
Refine 7
Reject 3
Promotion threshold 85+
Median score 78
Coverage floor 70%
Max exceptions 3
  • Promote when score and ownership both hold Strong candidates combine high coverage, low policy drag, and an accountable business owner who can defend the bundle in validation.
  • Refine when the role is directionally right Keep candidates that fit the cohort but still mix incompatible edge permissions, regional variants, or temporary access grants.
  • Reject when the score is inflated by noise Discard bundles driven by outliers, excess overlap, or unresolved SoD combinations even if raw frequency makes them look attractive.
Use this page to separate mathematically strong clusters from operationally usable roles. High scores matter, but a candidate should only move forward once scope, ownership, and exception rationale are clear enough for review.

Analyst Focus

Target the work that most improves decision quality before the queue moves into validation.

Needs attention
  • Resolve cross-region overlap Regional finance entitlements are inflating two candidates that otherwise look promotion-ready.
  • Confirm owner for service desk bundle The service desk role scores well, but validation should not begin until its support operations owner is named.
  • Challenge warehouse reviewer scope One candidate includes review permissions that do not belong in the standard warehouse operator path.
Recent review activity
Queue live
  • Finance Month-End Operator promoted to validation Cleared for Stage 6 after exception review.
    Promote

    Analyst note: remove one dormant report entitlement before packaging the final proposal.

  • Service Desk Resolver returned for refinement Temporary elevation rights still need separation.
    Refine

    Analyst note: split emergency access from the standard resolver role before re-scoring.

  • Warehouse Reviewer challenged on SoD grounds Decision and fulfillment rights should not remain in the same role.
    Challenge

    Analyst note: re-cluster around inventory posting only and send the review path back to discovery.

Priority queue
Ranked Role Candidates

Review the strongest candidates first, then work down into bundles that need refinement or a challenge before validation.

Ready for Stage 6 Policy challenge
Candidate Score Coverage Risk Status Decision Review note
01
Finance Month-End Operator

ERP close, reconciliation, and review checkpoint access for shared-services finance analysts.

42 members 11 entitlements Finance Ops
91 blended score
82% cohort fit
Low risk Validation ready Promote

Keep the regional tax reporting add-on out of the base role and move forward.

02
Service Desk Resolver

Ticket fulfillment, device reset, and standard support tooling for tier-one support teams.

58 members 14 entitlements IT Support
86 blended score
79% cohort fit
Medium risk Refinement queue Refine

Emergency elevation rights need to be split from the daily resolver baseline.

03
Procurement Request Coordinator

Vendor request, intake triage, and purchasing workflow initiation for shared procurement teams.

31 members 9 entitlements Procurement
83 blended score
76% cohort fit
Low risk Awaiting owner check Refine

The bundle is clean, but the final review path still needs business owner confirmation.

04
Warehouse Reviewer

Inventory decision and fulfillment sign-off access bundled with standard warehouse operator view rights.

19 members 12 entitlements Warehouse Ops
74 blended score
68% cohort fit
High risk SoD challenge Challenge

Decision and fulfillment activities should not remain together in the production role.

05
HR Case Intake Specialist

Case creation, HR system intake, and reporting access for HR shared-services triage staff.

24 members 8 entitlements HR Ops
72 blended score
71% cohort fit
Medium risk Needs trimming Refine

Archive and historical reporting access should be removed from the base intake profile.

Selected candidate
Finance Month-End Operator

Bundle close-period operational access into a reusable role that finance leadership can review quickly without losing entitlement traceability.

Close cycle Reconciliation Review checkpoints Low SoD pressure
Role score 91
Analyst confidence High
Target population 42 users
Open exceptions 2
Primary owner Finance Shared Services
Review state Promote to validation
Critical risk No unresolved SoD pair
Preparation Ready for review
Analyst output on this page should answer one question clearly: is this candidate ready to be defended as a real operating role, or does it still need clustering work before review?
IAM/IGA Portal — Internal Use Only. See documentation for policies. Copyright © 2026. All rights reserved.