My approach to approving/rejecting @SailPoint access requests could best be described as "sudo chmod -R 777 /*"