You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/active-directory-azure-ad-controls-create-access-review.md
+7-10Lines changed: 7 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,9 +31,9 @@ Access assignments become "stale" when users have access they don't need any mor
31
31
32
32
5. Set the start date. By default, an access review occurs once, starts the same time it's created, and it ends in one month. You can change the start and end dates to have an access review start in the future and last however many days you want.
33
33
34
-
6. To make the access review recurring, change the frequency from One time to Weekly, Monthly, Quarterly or Annually, and use the slider or text box to define how many days each review of the recurring series will runbe open for input from reviewers. For example, Tthe maximum duration for you can set for a monthly review is 27 days, to avoid overlapping reviews.
34
+
6. To make the access review recurring, change the frequency from One time to Weekly, Monthly, Quarterly or Annually, and use the slider or text box to define how many days each review of the recurring series will be open for input from reviewers. For example, the maximum duration for you can set for a monthly review is 27 days, to avoid overlapping reviews.
35
35
36
-
7. The recurring access review series can end in 3 ways: it runs continuously to start reviews indefinitely, or until a specific date, or after a defined number of occurrences has been completed. You or another global administrator can stop the series after creation by changing the date in Settings, so that it ends on that date.
36
+
7. The recurring access review series can end in 3 ways: it runs continuously to start reviews indefinitely, until a specific date, or after a defined number of occurrences has been completed. You or another global administrator can stop the series after creation by changing the date in Settings, so that it ends on that date.
37
37
38
38
8. Access reviews can be for the members of a group or for users who were assigned to an application. You can further scope the access review to review only the guest users who are members (or assigned to the app), rather than reviewing all the users who are members or who have access to the application.
39
39
@@ -43,15 +43,15 @@ Access assignments become "stale" when users have access they don't need any mor
43
43
44
44
### Configuring an access review with auto-apply
45
45
46
-
1. Expand the menu for Upon completion settings, andsettings and enable Auto apply results to resource.
46
+
1. Expand the menu for Upon completion settings and enable Auto apply results to resource.
47
47
48
-
2. In cases where users were not reviewed by the reviewer within the review period, you can have the access review either take the system's recommendation (if enabled) on denying/approving the user's continued access, or leave their access unchanged, or remove their access. This will not impact users who have been reviewed by the reviewers manually –if the final reviewer’s decision is Deny, then the user’s access will be removed.
48
+
2. In cases where users were not reviewed by the reviewer within the review period, you can have the access review either take the system's recommendation (if enabled) on denying/approving the user's continued access, leave their access unchanged, or remove their access. This will not impact users who have been reviewed by the reviewers manually –if the final reviewer’s decision is Deny, then the user’s access will be removed.
49
49
50
-
3. To enable the option to take recommendations should reviewers not respond, show recommendations in Advanced settings must be enabled.
50
+
3. To enable the option to take recommendations should reviewers not respond, expand Advanced settings and enable Show recommendations.
51
51
52
52
4. Finally, click **Start**.
53
53
54
-
Based on your selections in Upon completion settings, auto-apply will be executed after the review's end date or when you manually stop the review. The status of the review will change from Completed through intermediate states such as Applying and finally to state Applied. You should expect to see denied users, if any, being removed from the group membership or app assignment in a few minutes.
54
+
Based on your selections in Upon completion settings, auto-apply will be executed after the review's end date or when you manually stop the review. The status of the review will change from Completed through intermediate states such as Applying and finally to state Applied. You should expect to see denied users, if any, being removed from the group membership or app assignment in a few minutes.
55
55
56
56
57
57
## Manage the access review
@@ -66,11 +66,8 @@ You can track the progress as the reviewers complete their reviews in the Azure
66
66
67
67
## Next steps
68
68
69
-
When an access review has started, Azure AD automatically sends reviewers an email that prompts them to review access. If a user didn't get an email, you can send them the instructions
70
-
for how to [review access](active-directory-azure-ad-controls-perform-access-review.md).
69
+
When an access review has started, Azure AD automatically sends reviewers an email that prompts them to review access. If a user didn't get an email, you can send them the instructions for how to [review access](active-directory-azure-ad-controls-perform-access-review.md).
71
70
72
71
If this is a one-time review, then after the access review period is over or the administrator stops the access review, follow the steps in [Complete an access review](active-directory-azure-ad-controls-complete-access-review.md) to see and apply the results.
73
72
74
73
If this is a review series, then navigate to **Review history** on the access review series page, to select a completed access review. Upcoming reviews will be listed under **Scheduled review**, where you can edit the duration, and add or remove reviewers for individual reviews.
0 commit comments