Skip to content

Commit 8ff576f

Browse files
committed
added multi-stage to complete a review and fixed warning
1 parent b93d06d commit 8ff576f

File tree

2 files changed

+14
-9
lines changed

2 files changed

+14
-9
lines changed

articles/active-directory/fundamentals/whats-new-archive.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1838,7 +1838,7 @@ For more information about this feature, see [Disable and delete external identi
18381838
**Service category:** Access Reviews
18391839
**Product capability:** Identity Governance
18401840

1841-
In Azure AD access reviews, administrators creating reviews can now write a custom message to the reviewers. Reviewers will see the message in the email they receive that prompts them to complete the review. To learn more about using this feature, see step 14 of the [Create one or more access reviews](../governance/create-access-review.md#create-one-or-more-access-reviews) section.
1841+
In Azure AD access reviews, administrators creating reviews can now write a custom message to the reviewers. Reviewers will see the message in the email they receive that prompts them to complete the review. To learn more about using this feature, see step 14 of the [Create a single-stage review](../governance/create-access-review.md#create-a-single-stage-access-review) section.
18421842

18431843
---
18441844

articles/active-directory/governance/complete-access-review.md

Lines changed: 13 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ ms.workload: identity
1111
ms.tgt_pltfrm: na
1212
ms.topic: how-to
1313
ms.subservice: compliance
14-
ms.date: 08/20/2021
14+
ms.date: 02/18/2022
1515
ms.author: ajburnle
1616
ms.reviewer: mwahl
1717
ms.collection: M365-identity-device-management
@@ -42,7 +42,6 @@ You can track the progress of access reviews as they are completed.
4242

4343
1. In the list, click an access review.
4444

45-
4645
On the **Overview** page, you can see the progress of the **Current** instance of the review. If there is not an active instance open at the time, you will see information on the previous instance. No access rights are changed in the directory until the review is completed.
4746

4847
![Review of All company group](./media/complete-access-review/all-company-group.png)
@@ -69,20 +68,28 @@ You can track the progress of access reviews as they are completed.
6968

7069
1. If you're no longer interested in the access review, you can delete it by clicking the **Delete** button.
7170

71+
### View status of multi-stage review (preview)
72+
73+
To see the status and stage of a multi-stage access review:
74+
75+
1. Select the multi-stage review you want to check the status of or see what stage it's in.
76+
77+
1. Click **Results** on the left nav menu under **Current**.
78+
79+
1. Once you are on the results page, under **Status** it will tell you which stage the multi-stage review is in. The next stage of the review won't become active until the duration specified during the access review setup has passed.
80+
81+
1. If a decision has been made, but the review duration for this stage has not expired yet, you can select **Stop current stage** button on the results page. This will trigger the next stage of review.
82+
7283
## Retrieve the results
7384

7485
To view the results for a review, click the **Results** page. To view just a user's access, in the Search box, type the display name or user principal name of a user whose access was reviewed.
7586

7687
![Retrieve results for an access review](./media/complete-access-review/retrieve-results.png)
7788

78-
7989
To view the results of a completed instance of an access review that is recurring, click **Review history**, then select the specific instance from the list of completed access review instances, based on the instance's start and end date. The results of this instance can be obtained from the **Results** page. Recurring access reviews allow you to have a constant picture of access to resources that may need to be updated more often than one-time access reviews.
8090

8191
To retrieve the results of an access review, both in-progress or completed, click the **Download** button. The resulting CSV file can be viewed in Excel or in other programs that open UTF-8 encoded CSV files.
8292

83-
84-
85-
8693
## Apply the changes
8794

8895
If **Auto apply results to resource** was enabled based on your selections in **Upon completion settings**, auto-apply will be executed once a review instance completes, or earlier if you manually stop the review.
@@ -105,14 +112,12 @@ Manually or automatically applying results doesn't have an effect on a group tha
105112
> - Reviewing a resource (role, group, application) with nested groups assigned: For users who have membership through a nested group, we will not remove their membership to the nested group and therefore they will retain access to the resource being reviewed.
106113
> - User not found / other errors can also result in an apply result not being supported.
107114
108-
109115
## Actions taken on denied guest users in an access review
110116

111117
On review creation, the creator can choose between two options for denied guest users in an access review.
112118
- Denied guest users can have their access to the resource removed. This is the default.
113119
- The denied guest user can be blocked from signing in for 30 days, then deleted from the tenant. During the 30-day period the guest user is able to be restored access to the tenant by an administrator. After the 30-day period is completed, if the guest user has not had access to the resource granted to them again, they will be removed from the tenant permanently. In addition, using the Azure Active Directory portal, a Global Administrator can explicitly [permanently delete a recently deleted user](../fundamentals/active-directory-users-restore.md) before that time period is reached. Once a user has been permanently deleted, the data about that guest user will be removed from active access reviews. Audit information about deleted users remains in the audit log.
114120

115-
116121
## Next steps
117122

118123
- [Manage access reviews](manage-access-review.md)

0 commit comments

Comments
 (0)