You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/fundamentals/whats-new-archive.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1838,7 +1838,7 @@ For more information about this feature, see [Disable and delete external identi
1838
1838
**Service category:** Access Reviews
1839
1839
**Product capability:** Identity Governance
1840
1840
1841
-
In Azure AD access reviews, administrators creating reviews can now write a custom message to the reviewers. Reviewers will see the message in the email they receive that prompts them to complete the review. To learn more about using this feature, see step 14 of the [Create one or more access reviews](../governance/create-access-review.md#create-one-or-more-access-reviews) section.
1841
+
In Azure AD access reviews, administrators creating reviews can now write a custom message to the reviewers. Reviewers will see the message in the email they receive that prompts them to complete the review. To learn more about using this feature, see step 14 of the [Create a single-stage review](../governance/create-access-review.md#create-a-single-stage-access-review) section.
Copy file name to clipboardExpand all lines: articles/active-directory/governance/complete-access-review.md
+13-8Lines changed: 13 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ ms.workload: identity
11
11
ms.tgt_pltfrm: na
12
12
ms.topic: how-to
13
13
ms.subservice: compliance
14
-
ms.date: 08/20/2021
14
+
ms.date: 02/18/2022
15
15
ms.author: ajburnle
16
16
ms.reviewer: mwahl
17
17
ms.collection: M365-identity-device-management
@@ -42,7 +42,6 @@ You can track the progress of access reviews as they are completed.
42
42
43
43
1. In the list, click an access review.
44
44
45
-
46
45
On the **Overview** page, you can see the progress of the **Current** instance of the review. If there is not an active instance open at the time, you will see information on the previous instance. No access rights are changed in the directory until the review is completed.
47
46
48
47

@@ -69,20 +68,28 @@ You can track the progress of access reviews as they are completed.
69
68
70
69
1. If you're no longer interested in the access review, you can delete it by clicking the **Delete** button.
71
70
71
+
### View status of multi-stage review (preview)
72
+
73
+
To see the status and stage of a multi-stage access review:
74
+
75
+
1. Select the multi-stage review you want to check the status of or see what stage it's in.
76
+
77
+
1. Click **Results** on the left nav menu under **Current**.
78
+
79
+
1. Once you are on the results page, under **Status** it will tell you which stage the multi-stage review is in. The next stage of the review won't become active until the duration specified during the access review setup has passed.
80
+
81
+
1. If a decision has been made, but the review duration for this stage has not expired yet, you can select **Stop current stage** button on the results page. This will trigger the next stage of review.
82
+
72
83
## Retrieve the results
73
84
74
85
To view the results for a review, click the **Results** page. To view just a user's access, in the Search box, type the display name or user principal name of a user whose access was reviewed.
75
86
76
87

77
88
78
-
79
89
To view the results of a completed instance of an access review that is recurring, click **Review history**, then select the specific instance from the list of completed access review instances, based on the instance's start and end date. The results of this instance can be obtained from the **Results** page. Recurring access reviews allow you to have a constant picture of access to resources that may need to be updated more often than one-time access reviews.
80
90
81
91
To retrieve the results of an access review, both in-progress or completed, click the **Download** button. The resulting CSV file can be viewed in Excel or in other programs that open UTF-8 encoded CSV files.
82
92
83
-
84
-
85
-
86
93
## Apply the changes
87
94
88
95
If **Auto apply results to resource** was enabled based on your selections in **Upon completion settings**, auto-apply will be executed once a review instance completes, or earlier if you manually stop the review.
@@ -105,14 +112,12 @@ Manually or automatically applying results doesn't have an effect on a group tha
105
112
> - Reviewing a resource (role, group, application) with nested groups assigned: For users who have membership through a nested group, we will not remove their membership to the nested group and therefore they will retain access to the resource being reviewed.
106
113
> - User not found / other errors can also result in an apply result not being supported.
107
114
108
-
109
115
## Actions taken on denied guest users in an access review
110
116
111
117
On review creation, the creator can choose between two options for denied guest users in an access review.
112
118
- Denied guest users can have their access to the resource removed. This is the default.
113
119
- The denied guest user can be blocked from signing in for 30 days, then deleted from the tenant. During the 30-day period the guest user is able to be restored access to the tenant by an administrator. After the 30-day period is completed, if the guest user has not had access to the resource granted to them again, they will be removed from the tenant permanently. In addition, using the Azure Active Directory portal, a Global Administrator can explicitly [permanently delete a recently deleted user](../fundamentals/active-directory-users-restore.md) before that time period is reached. Once a user has been permanently deleted, the data about that guest user will be removed from active access reviews. Audit information about deleted users remains in the audit log.
0 commit comments