Who needs P2 license for Access Reviews? Creator? Reviewer? Reviewees?

Question

Hello,

We are exploring MS ENTRA ID - Access Reviews.

May I know the following?

What license required for the creator of the access review?

What license required for the reviewers?

What will happen to the decision of the reviewers if they don't have the required license? Please answer for both approve and deny.

What license required for the reviewees?

What will happen to the access of the reviewees based on the decision if they don't have the required license? Please answer for both approve and deny?

Answer 1

Hi @Leor Aaron Dimalanta
It seems you are trying to understand who needs P2 license for Access Reviews.
To create and manage access reviews, you need one of the following licenses:

• Microsoft Entra ID P2 or Microsoft Entra ID Governance or Enterprise Mobility + Security (EMS) E5

Reviewers also need to have one of the licenses mentioned above (P2, Entra ID Governance, or EMS E5). While users being reviewed do not need these licenses to participate in the review, it's essential that the organization has sufficient licenses for the reviewers.

• If a reviewer does not have the required license, they won’t be able to perform the review. Thus, their decisions (approve/deny) won't be valid, and the access review may be incomplete.
• Reviewees do not need any specific license to be reviewed but the organization must already hold the necessary licenses to run these reviews.
• The access decisions made by reviewers (approve or deny) should still take effect regardless of whether the reviewees have licenses or not. However, if a reviewee's access is denied, they will lose access to the resources regardless of their licensing status.

Follow the document for more information: https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview#license-requirements

Hope this helps. Do let us know if you have any further queries.

If this answers your query, do click `Accept Answer` and `Yes`.

Answer 2

Hello Leor Aaron Dimalanta,

1. License Required for the Creator of the Access Review

Required License: Microsoft Entra ID Governance or Azure AD Premium P2.

Why: The creator configures and manages access reviews, which is a premium governance feature

2. License Required for Reviewers

Required License: Microsoft Entra ID Governance or Azure AD Premium P2.

Why: Reviewers interact with the access review system to approve or deny access, which is considered active use of the feature

3. What Happens if Reviewers Don’t Have the Required License?

Approve or Deny: If a reviewer does not have the required license:

They may not be able to access the review interface.

Their decisions might not be recorded or allowed, depending on enforcement settings.

Microsoft may consider this a compliance violation if unlicensed users are using premium features.

4. License Required for Reviewees (Users Being Reviewed)

Required License:

Internal users: Need Microsoft Entra ID Governance or Azure AD Premium P2.

Guest users: Do not require a license

5. What Happens if Reviewees Don’t Have the Required License?

• Approve (Keep Access):

If the reviewee is unlicensed and the reviewer approves access, the system may still retain access, but this could be non-compliant with licensing terms.

• Deny (Remove Access):

If access is denied, the system will remove access as configured, regardless of the reviewee’s license status.

Best regards,