Managing Azure AD access reviews

Azure AD access reviews are a feature of Azure AD Premium P2. It enables Microsoft 365 administrators to ensure that users within the tenant have the appropriate level of access. Users are able to participate in this process themselves, or alternatively, their supervisor can review and access the users' current level of access. Once a review is completed, changes can be made and access can be revoked from users, as deemed appropriate.

Performing an access review

To create and execute an access review, you need to follow these steps:

1. Log in to the Azure portal as either a Global Administrator or a User Administrator.
2. Open the Identity Governance page and click Access reviews.
3. Choose the option to create a New access review:

   Figure 2.38 – Access reviews

4. In this example, we will create an access review that has been configured to run only once, and which targets the members of the Sales Users group (alternatively, you...