Is the following true regarding User Levels and permissions?

The statement is correct. A user does not need an administrative User Level such as Certification Admin or Org Admin merely to review a certification that has legitimately been assigned to them. Certification administration and certification reviewing are separate permission concepts.

The SailPoint User Level Access Matrix shows that the ordinary End User experience includes access to the Certifications functionality. This permits users to open certifications assigned to them, evaluate the relevant access items, record approval or revocation decisions, and sign off on the certification. Elevated Certification Admin permissions are instead required for administrative functions such as managing certification campaigns and broader certification configuration.

This design is essential because certification reviewers are commonly business managers, entitlement owners, source owners, Governance Group members, or other business stakeholders who should not require broad administrative privileges merely to participate in governance reviews.

Therefore, if a standard user has been properly assigned certification-review responsibility, ordinary user permissions are sufficient to perform that review.

Study Guide Reference: Platform — User Levels, End User Permissions, Certification Reviewers and Certification Administration.

===============