Access Review for RBAC Roles

Question

Can i create access reviews for RBAC roles,if yes where i need create .I am not able to find the options.

Answer 1

@Dhinesh SA ,

As Andy David mentioned, you can create access review for both RBAC roles (Azure resource roles) and Azure AD roles. The controls are just located in different places. For Azure resources, you need to select your resource under Azure resources and then select Access reviews from the dashboard. (Whereas for Azure AD roles, you would just proceed directly to the Access reviews on the dashboard). Then you can complete the access reviews for the Azure resource roles.

To create access reviews for Azure resources, you must be assigned to the Owner or the User Access Administrator role for the Azure resources. As you can see the Microsoft Sentinel Contributor RBAC role is included.

Let me know if this helps and if you have further questions.

If the information helped you, please Accept the answer. This will help us and improve discoverability for others in the community who may be researching similar questions.

Answer 2

Yes, assuming its one of these areas and you are using PIM:

https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-create-azure-ad-roles-and-resource-roles-review?toc=%2Fazure%2Factive-directory%2Fgovernance%2Ftoc.json

https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#where-do-you-create-reviews

Answer 3

So we can do access reviews only for Subscription level?