Access review -Identity Governance Azure

kumar kaushal 176

Query on Access Review - Identity Governance Azure

• How to get a list of groups which are reviewed and which are yet to be reviewed. Is there an option to extract / download all groups with their review status.
• Can we send reminders or restart the process for the non reviewed groups.

kumar kaushal 176 Reputation points

2021-08-01T23:44:45.503+00:00

Yes you can get a report of groups that were reviewed and which are yet to be reviewed for last 30 days . Please follow the below article to get that report. The review status table will tell as to how many of them are completed and how many of them are still in progress.

https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-downloadable-review-history

The question that i have is : If we want to send reminders to the users /groups to complete the review .. That has to be done Individually against each review am i correct ?
kumar kaushal 176 Reputation points

2021-08-05T08:24:05.887+00:00

I have one more question in regards to download access review history .. Is that we can only download last 30 days history report or we can go beyond that as well ?

https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-downloadable-review-history
Marilee Turscak-MSFT 36,946 Reputation points Microsoft Employee

2021-08-20T00:20:50.347+00:00

By default, an access review occurs once, starts the same time it's created, and it ends in one month. You can change the start and end dates to have an access review start in the future and last however many days you want.

You can set up recurring access reviews of users at set frequencies such as weekly, monthly, quarterly or annually. I tested and it seemed like the longest duration I could put is 999 days, and after 1000 there is a cap. I assume that the report would extend at least as far as the review has been applied, but since that isn't explicitly documented I'm confirming this with the product team.

https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-start-security-review
Marilee Turscak-MSFT 36,946 Reputation points Microsoft Employee

2021-08-20T23:44:07.023+00:00

It won't let me go back farther than 30 days in the portal, and it seems like that may be the limitation.
Rakesh Jagatap 11 Reputation points

2021-10-01T11:44:11.9+00:00

Hi, if any of the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

1 answer

Marilee Turscak-MSFT 36,946 Reputation points Microsoft Employee

2021-08-30T18:48:35.723+00:00

I just got confirmation on this. When you create a report, it is available for download for 30 days after creation. The contents of the report can span as far back as you would like them to, controlled on creation by the pickers for review starting between dates X and ending between dates Y.

Hope this helps!
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Access review -Identity Governance Azure

1 answer

Your answer