reviewRequired=“true” does not force a form globally for every request. It only means that if that field is part of the provisioning policy being used, the field must be shown during provisioning-request processing even when a value can be defaulted or calculated. If the Create policy is never invoked, reviewRequired on that create-form field will not help.