Further to this point, this post is very relevant, Certification Campaign Templates - How to access Description? - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community. It was closed with a solution, but solution was these are the variables we offer. When we create our reviews we create detailed descriptions, including risk and impact. Reviews don’t always understand Active Directory groups. Passing this information allows us to communicate the result of over previsioning and avoids the rubber stamp approch to approving.