The access review asks who can read each output and who can change its definition. Start with the principal and the required action, then follow the catalog hierarchy to find the necessary scope. A grant on one table is different from a grant inherited across a schema.
You will reuse grants, revokes and restricted views. The review also includes managed and external tables because deletion affects their data lifecycles differently. Do not infer access from a table's name or assume a policy has been applied merely because a view returns masked values for your current query. Check the recipient's complete access path. A least-privilege answer gives the requested group the requested capability and leaves unrelated data outside that boundary.