You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/governance/create-access-review.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -78,7 +78,7 @@ For more information, see [License requirements](access-reviews-overview.md#lice
78
78
79
79
### Next: Reviews
80
80
81
-
1. You can create a single-stage or multi-stage review. For a single stage review continue here. To create a multi-stage access review (preview), follow the steps in [Create a multi-stage access review (preview)](#create-a-multi-stage-access-review-preview)
81
+
1. You can create a single-stage or multi-stage review (preview). For a single stage review continue here. To create a multi-stage access review (preview), follow the steps in [Create a multi-stage access review (preview)](#create-a-multi-stage-access-review-preview)
82
82
83
83
1. In the **Specify reviewers** section, in the **Select reviewers** box, select either one or more people to make decisions in the access reviews. You can choose from:
Azure Active Directory (Azure AD) simplifies how enterprises manage access to groups and applications in Azure AD and other Microsoft Online Services with a feature called Azure AD access reviews. This article will go over how a designated reviewer performs an access review for members of a group or users with access to an application. If you would like to review access to an access package read [Review access of an access package in Azure AD entitlement management](entitlement-management-access-reviews-review-access.md)
22
22
23
23
## Perform access review using My Access
24
-
You can review access to groups and applications two ways. You can review either via email or via My Access.
24
+
You can review access to groups and applications via My Access, an end-user friendly portal for granting, approving, and reviewing access needs.
25
25
26
-
### Use email
26
+
### Use email to navigate to My Access
27
27
28
28
>[!IMPORTANT]
29
29
> There could be delays in receiving email and it some cases it could take up to 24 hours. Add [email protected] to your safe recipients list to make sure that you are receiving all emails.
@@ -34,15 +34,15 @@ You can review access to groups and applications two ways. You can review either
34
34
35
35
1. Click the **Start review** link to open the access review.git pu
36
36
37
-
### Use My Access
37
+
### Navigate directly to My Access
38
38
39
39
You can also view your pending access reviews by using your browser to open My Access.
40
40
41
-
1. Sign in to the My Access at https://myaccess.microsoft.com/
41
+
1. Sign in to the My Access at https://myaccess.microsoft.com/
42
42
43
43
2. Select **Access reviews** from the menu on the left side bar to see a list of pending access reviews assigned to you.
44
44
45
-
## Review access
45
+
## Review access for one or more users
46
46
47
47
After you open My Access under Groups and Apps you can see:
48
48
@@ -62,7 +62,7 @@ Once that it opens, you will see the list of users in scope for the access revie
62
62
63
63
There are two ways that you can approve or deny access:
64
64
65
-
- You can manually approve or deny access for one or more users. You can also mark users as "Don't Know".
65
+
- You can manually approve or deny access for one or more users.
66
66
- You can accept the system recommendations.
67
67
68
68
### Manually review access for one or more users
@@ -72,7 +72,7 @@ There are two ways that you can approve or deny access:
72
72
1. Select one or more users by clicking the circle next to their names.
73
73
74
74
1. Select **Approve** or **Deny** on the bar above.
75
-
- If you are unsure if a user should continue to have access or not, you can click **Don't know**. The user gets to keep their access and your choice is recorded in the audit logs. It is important that you keep in mind that any information you provide may be available to other reviewers.
75
+
- If you are unsure if a user should continue to have access or not, you can click **Don't know**. The user gets to keep their access and your choice is recorded in the audit logs. It is important that you keep in mind that any information you provide will be available to other reviewers. They can read your comments and take them into account when they review the request.
76
76
77
77

78
78
@@ -87,7 +87,7 @@ There are two ways that you can approve or deny access:
87
87
88
88
### Review access based on recommendations
89
89
90
-
To make access reviews easier and faster for you, we also provide recommendations that you can accept with a single click. The recommendations are generated based on the user's sign-in activity in the 30-day period before the review started.
90
+
To make access reviews easier and faster for you, we also provide recommendations that you can accept with a single click. The recommendations are generated based on the user's sign-in activity.
91
91
92
92
1. Select one or more users and then Click **Accept recommendations**.
93
93
@@ -103,11 +103,11 @@ To make access reviews easier and faster for you, we also provide recommendation
103
103
104
104
### Review access for one or more users in a multi-stage access review (preview)
105
105
106
-
If multi-stage access reviews have been enabled by the administrator, there will be 2 or 3 total stages of review. Each stage of review will have a specified reviewer(s).
106
+
If multi-stage access reviews have been enabled by the administrator, there will be 2 or 3 total stages of review. Each stage of review will have a specified reviewer.
107
107
108
108
You will review access either manually or accept the recommendations based on sign-in activity for the stage you are assigned as the reviewer.
109
109
110
-
If you are the 2nd stage or 3rd stage reviewer, you will also see the decisions made by the reviewers in the prior stage(s) if the administrator enabled this setting when creating the access review.
110
+
If you are the 2nd stage or 3rd stage reviewer, you will also see the decisions made by the reviewers in the prior stage(s) if the administrator enabled this setting when creating the access review. The decision made by a 2nd or 3rd stage reviewer will overwrite the previous stage. So, the decision the 2nd stage reviewer makes will overwrite the first stage, and the 3rd stage reviewer's decision will overwrite the second stage.
111
111
112
112

113
113
@@ -117,11 +117,9 @@ Approve or deny access as outlined in [Review access for one or more users](#rev
117
117
> The next stage of the review won't become active until the duration specified during the access review setup has passed. If the administrator believes a stage is done but the review duration for this stage has not expired yet, they can use the **Stop current stage** button in the overview of the access review in the Azure AD portal. This will close the active stage and start the next stage.
118
118
119
119
## If no action is taken on access review
120
-
When the access review is setup, the administrator has the option to use advanced settings to determine what will
121
-
happen in the event a reviewer doesn't respond to an access review request.
120
+
When the access review is setup, the administrator has the option to use advanced settings to determine what will happen in the event a reviewer doesn't respond to an access review request.
122
121
123
-
- If the administrator set **If reviewers don't respond** to **Remove access**, then the user's access will be removed if you don't take action on the access review request.
124
-
- If the administrator set **If reviewers don't respond** to **Take recommendations**, then similar to when you accept recommendations, the user's access with be determined by their sign in activity if you don't take action on the access review request.
122
+
The administrator can set up the review so that if reviewers do not respond at the end of the review period, all unreviewed users can have an automatic decision made on their access. This includes the loss of access to the group or application under review.
0 commit comments