Adding the user to a separate role at the lowest level of the role hierarchy ensures that the manual reviewer does not inadvertently gain access to other users' accounts through role hierarchy-based sharing rules. This setup confines the user's access to only those records explicitly assigned to them, maintaining data security and ensuring proper access control.
References:
* Role Hierarchy Best Practices
* Managing User Permissions