Is anyone else experiencing issues with access packages not fully delivering access?

ca-gideon hewitt 0 Reputation points
2024-05-15T15:52:51.6966667+00:00

I am writing to seek assistance with an issue we are experiencing related to access packages not fully delivering access to our employees.

 

In our current process, an employee uses ‘My Access’ to request access to a group in Azure. This request undergoes an approval process as detailed in the policy of the access package. Upon full approval, the requestor should be added to the group.

 

However, we have observed instances where the request gets approved, but the access fails to deliver. There are no errors or details of the failure in the audit logs of the users or groups. It appears as though the process simply stops.

 

This issue is inconsistent. It can work correctly for one user and fail for another, both requesting the same access. The same user can request access and it can fail, then cancel the failed request, re-request it, and it works.

 

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,942 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Akhilesh 5,640 Reputation points Microsoft Vendor
    2024-05-20T07:57:59.84+00:00

    Hi @ca-gideon hewitt

    Thank you for your post!

    I understand that the access package requests are getting approved, but the access is not being delivered to the users.
    Could you please check that your tenant has a Microsoft Entra ID P2 or Microsoft Entra ID Governance (or EMS E5) license. If you’ve recently renewed an expired Microsoft Entra ID P2 or Microsoft Entra ID Governance subscription, then it may take 8 hours for this license renewal to be visible.
    You can View a request's delivery errors in Entitlement management
    If the request has any delivery errors, the request status will be Undelivered or Partially delivered.

    If there are any delivery errors, a count of delivery errors will be displayed in the request's detail pane.

    For more information refer View a request's delivery errors
    Reprocess assignments for an access package in entitlement management
    Troubleshoot entitlement management

    Hope this helps. Do let us know if you any further queries.

    Thanks,
    Akhilesh.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.