Access Review for RBAC Roles

Question

Access Review for RBAC Roles

Dhinesh SA 40

Can i create access reviews for RBAC roles,if yes where i need create .I am not able to find the options.

Marilee Turscak-MSFT 37,396 Reputation points Microsoft Employee Moderator

2023-05-12T00:40:06.09+00:00

Hi @Dhinesh SA ,

We noticed your feedback that the answer on this thread was not helpful.

Thank you for taking time to share your feedback. Kindly let us know what we could have done better to improve the answer and make your experience better.

Since we were able to provide the correct steps to create the access reviews, offer the proper links and screenshots, and clarify the answer to your follow-up question, I request that you would kindly re-take the survey for your experience on this thread or accept one of the answers.

However, if your issue remains unresolved, please let us know how we can assist. We are here to help you and strive to make your experience better and greatly value your feedback. Looking forward to your reply. Much appreciate your feedback!

Answer accepted by question author

Marilee Turscak-MSFT 37,396 Microsoft Employee Moderator

@Dhinesh SA ,

As Andy David mentioned, you can create access review for both RBAC roles (Azure resource roles) and Azure AD roles. The controls are just located in different places. For Azure resources, you need to select your resource under Azure resources and then select Access reviews from the dashboard. (Whereas for Azure AD roles, you would just proceed directly to the Access reviews on the dashboard). Then you can complete the access reviews for the Azure resource roles.

User's image

To create access reviews for Azure resources, you must be assigned to the Owner or the User Access Administrator role for the Azure resources. As you can see the Microsoft Sentinel Contributor RBAC role is included.

User's image

Let me know if this helps and if you have further questions.

If the information helped you, please Accept the answer. This will help us and improve discoverability for others in the community who may be researching similar questions.

0 comments

2 additional answers

Your answer

Marilee Turscak-MSFT 37,396 Reputation points Microsoft Employee Moderator

2023-05-12T00:40:06.09+00:00

Hi @Dhinesh SA ,

We noticed your feedback that the answer on this thread was not helpful.

Thank you for taking time to share your feedback. Kindly let us know what we could have done better to improve the answer and make your experience better.

Since we were able to provide the correct steps to create the access reviews, offer the proper links and screenshots, and clarify the answer to your follow-up question, I request that you would kindly re-take the survey for your experience on this thread or accept one of the answers.

However, if your issue remains unresolved, please let us know how we can assist. We are here to help you and strive to make your experience better and greatly value your feedback. Looking forward to your reply. Much appreciate your feedback!

Answer 1

Dhinesh SA 40

So we can do access reviews only for Subscription level?

Marilee Turscak-MSFT 37,396 Reputation points Microsoft Employee Moderator

2023-05-12T19:59:38.4+00:00

This is correct.

Answer 2

Andy David - MVP 160.3K MVP Volunteer Moderator

Yes, assuming its one of these areas and you are using PIM:

https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-create-azure-ad-roles-and-resource-roles-review?toc=%2Fazure%2Factive-directory%2Fgovernance%2Ftoc.json

https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#where-do-you-create-reviews

User's image

Dhinesh SA 40 Reputation points

2023-05-12T17:46:23.6266667+00:00

Got it thanks

Share via

Access Review for RBAC Roles

2 additional answers

Your answer