Skip to content

Commit 28b643d

Browse files
committed
acrolinx update part 2
1 parent 8337610 commit 28b643d

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/active-directory/governance/using-multi-stage-reviews.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ For reviews that may contain many reviewees, or users to be reviewed and atteste
7171

7272
Later stage reviewers, such as user’s managers, or the resource owner, only see the reduced list of reviewees – those that approved previously. The number of reviewees per stage decreases stage by stage. Only the users that have been approved through all three stages preserve access.
7373

74-
An example of this would be a review of a group that grants an IT exception, that an administrator wants to regularly review. As that exception is popular, users are asked to respond first, and only those that responded that they still need the exception, are progressed to the second stage, where their manager decides. Only if the user and the manager approve, IT owners for the exception get to see the list of users who still need and want the exception, look at a reduced list of reviewees.
74+
An example would be a review of a group that grants an IT exception, that an administrator wants to regularly review. As that exception is popular, users are asked to respond first, and only those that responded that they still need the exception, are progressed to the second stage, where their manager decides. Only if the user and the manager approve, IT owners for the exception get to see the list of users who still need and want the exception, look at a reduced list of reviewees.
7575

7676
| Attribute | Configuration |
7777
|:--- |:---:|
@@ -87,11 +87,11 @@ An example of this would be a review of a group that grants an IT exception, tha
8787

8888
## Guest user reviews
8989

90-
Guest user reviews include organizations that use Azure AD B2B for collaboration, users invited from another company into their tenant, guest user accounts created for assigning, and resources for tracking and reviewing access. These guest users’ access should be reviewed regularly to check on whether collaboration is still desired in order to facilitate a cleanup of guest user accounts that are no longer needed.
90+
Guest user reviews include organizations that use Azure AD B2B for collaboration, users that are invited from another company into their tenant, guest user accounts created for assigning, and resources for tracking and reviewing access. These guest users’ access should be reviewed regularly to check on whether collaboration is still desired in order to facilitate a cleanup of guest user accounts that are no longer needed.
9191

9292
This scenario can be configured with multi-stage reviews similarly to how the reduce reviewee list by filtering works. First, ask guest users to self-review and attest their continued interest and need for collaboration, and only then letting an internal employee approve or deny continued access or collaboration.
9393

94-
For guest user review scenarios, Access Reviews supports an extra configuration option: **Action to apply on denied guest users**, that can result in either:
94+
For guest user review scenarios, Access Reviews supports an extra configuration option: **Action to apply on denied guest users**, which can result in either:
9595

9696
- Remove user’s membership from the resource
9797
- Block user from signing-in for 30 days, then remove user from the tenant

0 commit comments

Comments
 (0)