The statement is incorrect. Identity Security Cloud prevents access-request self-approval by default. If the requester or access recipient belongs to a Governance Group that has been configured as an approval reviewer, SailPoint does not automatically approve the request merely because that person belongs to the group.

Instead, the requester or recipient is omitted from the Governance Group review. Other valid members of the group can review the request on behalf of the Governance Group. If the requester or recipient is the group's only member, the approval responsibility is reassigned to that person's manager. If no manager exists, Identity Security Cloud can ultimately route the approval to an administrator through its fallback behavior.

SailPoint does provide an optional automatic-approval configuration, but this is materially different. Auto-approval applies only when the configured reviewer is an individual identity and requires API configuration. SailPoint explicitly states that automatic approval does not apply when the configured reviewer is a Governance Group, even when the requester is its only member.

Study Guide Reference: Access Management — Access Request Approvals, Governance Groups, Preventing Self-Approval and Automatic Approval.

===============