This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 1%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
What License and Permission do I need to create the access review for the PIM group and the normal Group?
I have checked dozens of Wiki pages, and they have all the information, but I am still confused.
Question 1: Today, I got my Microsoft Identity Governance Trial License, but there is no difference. All I can see is three groups.
From what I can see with my P2 permission, I still see the same thing. - See attached
https://learn.microsoft.com/en-us/entra/id-governance/licensing-fundamentals#features-by-license
Question 2: My organization's IT person can create the Access review and see all the groups. He doesn't have a Microsoft Identity Governance license. Does that mean he has a Global Admin role that's why?
BR
Monica
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@Pawar, Monica Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.
Hi Monica,
Regarding you can´t see all groups, it can be that this might been setup in the tenant? :)
https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/administrative-units
In this way, you can select what groups and users etc. an User Administrator can see.
Try to here the IT about this, else let me know.
What licenses and permissions are required to create an Access review? Ultimately, I must make an access review for regular and PIM groups. I'm bit lost between License and permissions.
Access reviews are part of Entra ID Identity Governance, and the ability to create and manage access reviews typically requires an Entra ID Premium P2 license.
Here is more in the documentation about all the features in the different licenses here: https://learn.microsoft.com/en-us/entra/id-governance/licensing-fundamentals
Regarding the needed roles, there is many different use cases as I see, but from how I understand your case this is it: https://learn.microsoft.com/en-us/entra/id-governance/create-access-review#prerequisites
Overall list as of today:
Let me know if this works for you.
Access reviews are part of Entra ID Identity Governance, and the ability to create and manage access reviews typically requires an Entra ID Premium P2 license.
Here is more in the documentation about all the features in the different licenses here: https://learn.microsoft.com/en-us/entra/id-governance/licensing-fundamentals
Regarding the needed roles, there is many different use cases as I see, but from how I understand your case this is it: https://learn.microsoft.com/en-us/entra/id-governance/create-access-review#prerequisites
Overall list as of today:
Microsoft Entra ID P2 or Microsoft Entra ID Governance licenses.
Creating a review on inactive users, or with user-to-group affiliation recommendations, requires a Microsoft Entra ID Governance license.
Global administrator or Identity Governance administrator to create reviews on groups or applications.
Users must be in the Global administrator role or the Privileged Role administrator role to create reviews on role-assignable groups. For more information, see Use Microsoft Entra groups to manage role assignments.
Microsoft 365 and Security group owner.
Let me know if this works for you.