1. Non-transitory computer-readable media having instructions, that when executed by a processor of a computing device, cause the computing device to: selectively provide a plurality of interfaces at a display device in response to input received at the computing device wherein the plurality of interfaces include i) a rule configuration interface which configures a risk management rule in response to input received at the rule configuration interface wherein the rule configuration interface comprises a list of access rights available for selection, ii) an exception configuration interface which configures an exception to the risk management rule in response to input received at the exception configuration interface wherein the exception configuration interface comprises a list of attribute values available for selection, and iii) a violation review interface which receives a review decision for a violation review associated with the risk management rule wherein the violation review interface comprises a pending violation review list that indicates the violation review, the risk management rule associated with the violation review, and the exception to the risk management rule; identify a first access right as a base access right and a second access right as a conflicting access right for the risk management rule based on the input received at the rule configuration interface; associate one of the attribute values with the exception based on the input received at the exception configuration interface; create the violation review responsive to determining that a user has been provisioned with both the base access right and the conflicting access right; and store, at a data store, the review decision received at the violation review interface.