Self-service access with expiry and business controls.
A review asks a reviewer to keep or remove each person's access. Nobody reviews their own access.