Is it mandatory to have Microsoft Entra ID Governance License activated to create an access review?

Question

Is it mandatory to have Microsoft Entra ID Governance License activated to create an access review?

Pawar, Monica 120

Q1: Is activating the Microsoft Entra ID Governance License mandatory to create an access review?

Q2: Only the Identity Governance Administrator's permission would be sufficient to create an access review. Rather than having the Microsoft Entra ID Governance License

Accepted answer

2 additional answers

Your answer

Answer 1

Azar 29,520 MVP Volunteer Moderator

Hey there, Pawar, Monica

thanks for posting in QandA platform

Yes, activating the Microsoft Entitlement Management license is mandatory to create an access review in Azure AD.

and Yes, again only the Identity Governance Administrator's permission is required to create an access review. However, this permission is associated with the Microsoft Entitlement Management license, so having the license assigned to the user performing access review management tasks is necessary.

If this helps kindly accept the answer thanks much.

Pawar, Monica 120 Reputation points

2024-03-05T20:14:12.8533333+00:00

Thanks, Azar!

How about having the Entra ID P2 license? Won't that be sufficient?

Answer 2

Andy David - MVP 157.8K MVP Volunteer Moderator

Access reviews for PIM groups requires the governance License to be compliant:

User's image

Answer 3

Andy David - MVP 157.8K MVP Volunteer Moderator

It depends on the review type:

https://learn.microsoft.com/en-us/entra/id-governance/licensing-fundamentals

You can do basic access reviews with a P2:

Roles needed:

https://learn.microsoft.com/en-us/entra/id-governance/identity-governance-overview#appendix---least-privileged-roles-for-managing-in-identity-governance-features

User's image

Pawar, Monica 120 Reputation points

2024-03-05T20:23:20.3133333+00:00

Thanks @Andy David - MVP for your reply.

I need to create an Access review for both On-boarded /non-onboarded PIM groups. Permission only (Identity Governance Admin) won't be sufficient. Do I need a Microsoft Entra ID governance License?
Pawar, Monica 120 Reputation points

2024-03-05T20:27:13.04+00:00

Thanks @Andy David - MVP for your reply.

I need to create an Access review for both On-Boarded/Non-onboarded PIM groups.

Permission (Identity Governance Admin) won't only solve my purpose. Do I really need to have a License (Microsoft Entra ID Governance)? Entra ID P2 wouldn't be sufficient?

Share via

Is it mandatory to have Microsoft Entra ID Governance License activated to create an access review?

2 additional answers

Your answer