Auditing User Access Rights for Audit.

Question

At present, our organization utilizes Azure Server File Shares, Windows Server File Shares, and Microsoft Teams for document storage. In anticipation of an upcoming security audit, we are required to examine user access rights for shared folders across both Azure and on-premises Windows Servers to ensure that unauthorized access to restricted shares and folders is prevented. Additionally, our managers assign document access rights to team members within Microsoft Teams, and we need to regularly monitor these permissions.

Could you please advise us on whether there are any Microsoft applications that can assist with managing and auditing these access rights effectively?

Answer 1

@Stephen Weber Thanks for reaching out to Microsoft Q&A.

Regarding managing and auditing access rights in Microsoft-

Yes, Microsoft has a product called Permissions Management that can help you manage and audit access rights effectively. It allows you to right-size excessive permissions and automate least privilege policy enforcement with just a few clicks. The solution continuously analyzes historical permission usage data for each identity and gives you the ability to right-size permissions of that identity to only the permissions that are being used for day-to-day operations. All unused and other risky permissions can be automatically removed.

You can monitor permissions usage with Permissions Management by tracking the evolution of your Permission Creep Index in the "Analytics" tab in the Permissions Management dashboard. You can also generate permissions usage reports to make timely decisions, analyze usage trends and system/user performance, and identify high-risk areas.

For more information, you can refer to the following documentation:

• Trial User Guide - Microsoft Entra Permissions Management (https://learn.microsoft.com/en-us/azure/active-directory/cloud-infrastructure-entitlement-management/permissions-management-trial-user-guide)
• Frequently asked questions (FAQs) about Permissions Management (https://learn.microsoft.com/en-us/azure/active-directory/cloud-infrastructure-entitlement-management/faqs)

Hope this helps. If you have any further questions, please do let me know and I will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.