To be called by Scott/Jacob to create a campaign configuration, from Admin UI. The optional reviewer, if specified, can be any existing userId. For account campaign, blocklist contains default "unmatched" account status. If you want to retrieve unmatched accounts as well, you need to explicitly add them into the allowlist.
Entitlements required: manageAccessCertification [Manage Access Certification].