You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Review access to groups and applications in Azure AD access reviews
20
20
21
-
Azure Active Directory (Azure AD) simplifies how enterprises manage access to groups and applications in Azure AD and other Microsoft Online Services with a feature called Azure AD access reviews. This article will go over how a designated reviewer performs an access review for members of a group or users with access to an application. If you would like to review access to an access package read [Review access of an access package in Azure AD entitlement management](entitlement-management-access-reviews-review-access.md).
21
+
Azure Active Directory (Azure AD) simplifies how enterprises manage access to groups and applications in Azure AD and other Microsoft web services with a feature called Azure AD access reviews. This article will cover how a designated reviewer performs an access review for members of a group or users with access to an application. If you'd like to review access to an access package, read [Review access of an access package in Azure AD entitlement management](entitlement-management-access-reviews-review-access.md).
22
22
23
-
## Perform access review using My Access
24
-
You can review access to groups and applications via My Access, an end-user friendly portal for granting, approving, and reviewing access needs.
23
+
## Perform access review by using My Access
24
+
You can review access to groups and applications via My Access. My Access is an user friendly portal for granting, approving, and reviewing access needs.
25
25
26
-
### Use email to navigate to My Access
26
+
### Use email to go to My Access
27
27
28
28
>[!IMPORTANT]
29
-
> There could be delays in receiving email and it some cases it could take up to 24 hours. Add [email protected] to your safe recipients list to make sure that you are receiving all emails.
29
+
> There could be delays in receiving email and in some cases it could take up to 24 hours. Add [email protected] to your safe recipients list to make sure that you're receiving all emails.
30
30
31
-
1. Look for an email from Microsoft asking you to review access. You can see an example email message below:
31
+
1. Look for an email from Microsoft asking you to review access. Here is an example email message:
32
32
33
33
34
34
35
35
1. Click the **Start review** link to open the access review.
36
36
37
-
### Navigate directly to My Access
37
+
### Go directly to My Access
38
38
39
39
You can also view your pending access reviews by using your browser to open My Access.
40
40
@@ -44,18 +44,18 @@ You can also view your pending access reviews by using your browser to open My A
44
44
45
45
## Review access for one or more users
46
46
47
-
After you open My Access under Groups and Apps you can see:
47
+
After you open My Access under **Groups and Apps** you can see:
48
48
49
-
-**Name** The name of the access review.
50
-
-**Due** The due date for the review. After this date denied users could be removed from the group or app being reviewed.
51
-
-**Resource** The name of the resource under review.
52
-
-**Progress** The number of users reviewed over the total number of users part of this access review.
49
+
-**Name**: The name of the access review.
50
+
-**Due**: The due date for the review. After this date, denied users could be removed from the group or app being reviewed.
51
+
-**Resource**: The name of the resource under review.
52
+
-**Progress**: The number of users reviewed over the total number of users part of this access review.
53
53
54
-
Click on the name of an access review to get started.
54
+
Select the name of an access review to get started.
55
55
56
56
57
57
58
-
Once that it opens, you will see the list of users in scope for the access review.
58
+
After it opens, you will see the list of users in scope for the access review.
59
59
60
60
> [!NOTE]
61
61
> If the request is to review your own access, the page will look different. For more information, see [Review access for yourself to groups or applications](review-your-access.md).
@@ -69,16 +69,16 @@ There are two ways that you can approve or deny access:
69
69
70
70
1. Review the list of users and decide whether to approve or deny their continued access.
71
71
72
-
1. Select one or more users by clicking the circle next to their names.
72
+
1. Select one or more users by selecting the circle next to their names.
73
73
74
-
1. Select **Approve** or **Deny** on the bar above.
75
-
- If you are unsure if a user should continue to have access or not, you can click**Don't know**. The user gets to keep their access and your choice is recorded in the audit logs. It is important that you keep in mind that any information you provide will be available to other reviewers. They can read your comments and take them into account when they review the request.
74
+
1. Select **Approve** or **Deny** on the bar.
75
+
- If you're unsure if a user should continue to have access, you can select**Don't know**. The user gets to keep their access, and your choice is recorded in the audit logs. Keep in mind that any information you provide will be available to other reviewers. They can read your comments and take them into account when they review the request.
76
76
77
77
78
78
79
-
1. The administrator of the access review may require that you supply a reason for your decision in the **Reason** box, even when a reason is not required. You can still provide a reason for your decision, and the information that you include will be available to other approvers for review.
79
+
1. The administrator of the access review may require you to supply a reason for your decision in the **Reason** box, even when a reason is not required. You can still provide a reason for your decision, and the information that you include will be available to other approvers for review.
80
80
81
-
1.Click**Submit**.
81
+
1.Select**Submit**.
82
82
- You can change your response at any time until the access review has ended. If you want to change your response, select the row and update the response. For example, you can approve a previously denied user or deny a previously approved user.
83
83
84
84
> [!IMPORTANT]
@@ -87,28 +87,28 @@ There are two ways that you can approve or deny access:
87
87
88
88
### Review access based on recommendations
89
89
90
-
To make access reviews easier and faster for you, we also provide recommendations that you can accept with a single click. There are two ways recommendations are generated for the reviewer. One method the system uses to create recommendations is by the user's sign-in activity. If a user has been inactive for 30 days or more, it will be recommended that the reviewer to deny access. The other method is based on the access the user's peers have. If the user doesn't have the same access as their peers, it will be recommended that the reviewer deny that user access.
90
+
To make access reviews easier and faster for you, we also provide recommendations that you can accept with a single selection. There are two ways recommendations are generated for the reviewer. One method the system uses to create recommendations is by the user's sign-in activity. If a user has been inactive for 30 days or more, it will be recommended that the reviewer to deny access. The other method is based on the access the user's peers have. If the user doesn't have the same access as their peers, it will be recommended that the reviewer deny that user access.
91
91
92
-
If you have **No sign-in within 30 days** or **Peer outlier** enabled, follow the steps below to accept recommendations:
92
+
If you have **No sign-in within 30 days** or **Peer outlier** enabled, follow these steps to accept recommendations:
93
93
94
-
1. Select one or more users and then Click**Accept recommendations**.
94
+
1. Select one or more users and then select**Accept recommendations**.
95
95
96
96
97
97
98
98
1. Or to accept recommendations for all unreviewed users, make sure that no users are selected and click the **Accept recommendations** button on the top bar.
99
99
100
-
1.Click**Submit** to accept the recommendations.
100
+
1.Select**Submit** to accept the recommendations.
101
101
102
102
> [!NOTE]
103
-
> When you accept recommendations previous decisions will not be changed.
103
+
> When you accept recommendations, previous decisions won't be changed.
104
104
105
105
### Review access for one or more users in a multi-stage access review (preview)
106
106
107
107
If multi-stage access reviews have been enabled by the administrator, there will be two or three total stages of review. Each stage of review will have a specified reviewer.
108
108
109
-
You will review access either manually or accept the recommendations based on sign-in activity for the stage you are assigned as the reviewer.
109
+
You will review access either manually or accept the recommendations based on sign-in activity for the stage you're assigned as the reviewer.
110
110
111
-
If you are the second- or third-stage reviewer, you will also see the decisions made by the reviewers in the prior stage(s), if the administrator enabled this setting when creating the access review. The decision made by a second- or third-stage reviewer will overwrite the previous stage. So, the decision the second-stage reviewer makes will overwrite the first stage, and the third-stage reviewer's decision will overwrite the second stage.
111
+
If you're the second- or third-stage reviewer, you will also see the decisions made by the reviewers in the prior stage(s), if the administrator enabled this setting when creating the access review. The decision made by a second- or third-stage reviewer will overwrite the previous stage. So, the decision the second-stage reviewer makes will overwrite the first stage, and the third-stage reviewer's decision will overwrite the second stage.
112
112
113
113
114
114
@@ -121,7 +121,7 @@ Approve or deny access as outlined in [Review access for one or more users](#rev
121
121
122
122
To review access of B2B direct connect users, use the following instructions:
123
123
124
-
1. As the reviewer, you should receive an email that requests you to review access for the team or group. Click the link in the email, or navigate directly to https://myaccess.microsoft.com/.
124
+
1. As the reviewer, you should receive an email that requests you to review access for the team or group. Select the link in the email, or go directly to https://myaccess.microsoft.com/.
125
125
126
126
1. Follow the instructions in [Review access for one or more users](#review-access-for-one-or-more-users) to make decisions to approve or deny the users access to Teams.
127
127
@@ -133,7 +133,7 @@ If a Team you review has shared channels, all B2B direct connect users and teams
133
133
## If no action is taken on access review
134
134
When the access review is set up, the administrator has the option to use advanced settings to determine what will happen in the event a reviewer doesn't respond to an access review request.
135
135
136
-
The administrator can set up the review so that if reviewers do not respond at the end of the review period, all unreviewed users can have an automatic decision made on their access. This includes the loss of access to the group or application under review.
136
+
The administrator can set up the review so that if reviewers don't respond at the end of the review period, all unreviewed users can have an automatic decision made on their access. This includes the loss of access to the group or application under review.
0 commit comments