AI approvals
How changes the AI analyst proposes become approval requests, and how remediation plans are reviewed.
Updated
The AI analyst has read tools and scope-locked live checks. It has no way to change anything directly. When it suggests a change, it files an approval request; a person approves or rejects it, and only then does anything happen.
What it can propose
| Proposal | What approving does | Permission the approver needs |
|---|---|---|
| Change a finding's status | Sets the status (for example resolved or false positive), with the AI's reason recorded | Change findings |
| Run an assessment | Starts the assessment for the customer | Run assessments |
| Create a PSA ticket | Creates the ticket in your PSA for the finding | Change findings |
Approve or reject
Approval requests appear:
- in the Ask AI panel and on the AI analyst page, in the conversation that filed them;
- as a notification, if you've turned on AI analyst asks for approval (see Notifications).
Each request shows the action, its details and the AI's rationale. Choose Approve or Reject.
- The action runs with the approver's identity and permissions, not the AI's. If you can't do it yourself, you can't approve it.
- A request can only be decided once. It ends as executed, failed (with the reason) or rejected.
- The finding's history records the change as (approved AI suggestion) under your name, and every request and decision is in the audit log.
Remediation plans
A remediation plan is an ordered list of steps, each with a description, an optional script (PowerShell or Bash), how to verify it worked, how to roll it back, and a risk rating. Generate one from a finding's AI button or ask for one in a conversation.
Plans are drafts for your team. Revo never runs them. The plan page tracks your progress:
| Status | Next step |
|---|---|
| Draft | Approve plan or Reject |
| Approved | Start remediation |
| In progress | Mark completed |
| Completed / Rejected | — |
Run the scripts with your own tools (your RMM, a remote session), after reading them. Keep the rollback steps at hand. Once the fix is in place, the next assessment or agent report confirms it and the finding resolves itself.
Agent fixes are separate: the analyst can't start them, and they have no approval step (the person who starts one reviews and confirms it). See Fix with the agent and Remediation.