So from your screenshot, I'm assuming you are looking at doing this for db sessions where risky commands have been entered to notify audit administrators..

Essentially, you could leverage the Compliance Auditor Console within PAM to bring in "risky" sessions based on an Audit Rule that runs on an associated schedule (perhaps hourly). This creates a Compliance Audit Record that can be viewed where comments can be made and has a separate lifecycle for approving that risk from a compliance / audit perspective for the organization. You could then create an Audit Report to be emailed out periodically to notify admins of pending compliance audit records that need to be managed. See Using the Compliance Auditor for more details.