Azure Role Reviews - last login show when logged into portal not when role accessed by PIM.

H Raja 221

When you do a Azure Access Review, why does it show last login into Azure portal and not when role was used via PIM under the Microsoft Recommendations field?

JamesTran-MSFT 36,366 Reputation points Microsoft Employee

2020-12-09T18:33:39.32+00:00
@H Raja

Are you able to provide a screenshot of what you're seeing along with any documentation that you followed when you set up your Azure Access Review?

Is this the first time you're seeing this happen? Or have you been noticing your access reviews working as expected previously?

Any additional information would be greatly appreciated!

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
H Raja 221 Reputation points

2020-12-10T08:44:55.227+00:00

Hi, when I open a Role Reviews, the last column shows when, what I believe the user last logged onto the portal i.e. portal.azure.com. If I click on Audit Details it doesn't show me more info, unless access is elevated. Just wondering why can't last column show, when user last PIM'ed the Role? I assume that would be more reliable data. @JamesTran-MSFT
JamesTran-MSFT 36,366 Reputation points Microsoft Employee

2020-12-15T18:43:51.967+00:00
@H Raja
Thank you for the screenshot!

Are you seeing this under "PIM -> AzureAD Roles -> Access Reviews"?

Within my Access Review, I'm not able to see the Audit Details column:

If you're having issues seeing when a user last PIM'ed into a role and would like one of our Support Engineers to take a closer look into your issue, please let me know.
Thank you for your time and patience throughout this issue.