Skip to content

Commit a8867fd

Browse files
committed
made updates based on feedback
1 parent df38677 commit a8867fd

File tree

2 files changed

+14
-16
lines changed

2 files changed

+14
-16
lines changed

articles/active-directory/governance/create-access-review.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -78,7 +78,7 @@ For more information, see [License requirements](access-reviews-overview.md#lice
7878

7979
### Next: Reviews
8080

81-
1. You can create a single-stage or multi-stage review. For a single stage review continue here. To create a multi-stage access review (preview), follow the steps in [Create a multi-stage access review (preview)](#create-a-multi-stage-access-review-preview)
81+
1. You can create a single-stage or multi-stage review (preview). For a single stage review continue here. To create a multi-stage access review (preview), follow the steps in [Create a multi-stage access review (preview)](#create-a-multi-stage-access-review-preview)
8282

8383
1. In the **Specify reviewers** section, in the **Select reviewers** box, select either one or more people to make decisions in the access reviews. You can choose from:
8484

articles/active-directory/governance/perform-access-review.md

Lines changed: 13 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ ms.workload: identity
1010
ms.tgt_pltfrm: na
1111
ms.topic: how-to
1212
ms.subservice: compliance
13-
ms.date: 2/09/2022
13+
ms.date: 2/18/2022
1414
ms.author: ajburnle
1515
ms.reviewer: mwahl
1616
ms.collection: M365-identity-device-management
@@ -21,9 +21,9 @@ ms.collection: M365-identity-device-management
2121
Azure Active Directory (Azure AD) simplifies how enterprises manage access to groups and applications in Azure AD and other Microsoft Online Services with a feature called Azure AD access reviews. This article will go over how a designated reviewer performs an access review for members of a group or users with access to an application. If you would like to review access to an access package read [Review access of an access package in Azure AD entitlement management](entitlement-management-access-reviews-review-access.md)
2222

2323
## Perform access review using My Access
24-
You can review access to groups and applications two ways. You can review either via email or via My Access.
24+
You can review access to groups and applications via My Access, an end-user friendly portal for granting, approving, and reviewing access needs.
2525

26-
### Use email
26+
### Use email to navigate to My Access
2727

2828
>[!IMPORTANT]
2929
> There could be delays in receiving email and it some cases it could take up to 24 hours. Add [email protected] to your safe recipients list to make sure that you are receiving all emails.
@@ -34,15 +34,15 @@ You can review access to groups and applications two ways. You can review either
3434

3535
1. Click the **Start review** link to open the access review.git pu
3636

37-
### Use My Access
37+
### Navigate directly to My Access
3838

3939
You can also view your pending access reviews by using your browser to open My Access.
4040

41-
1. Sign in to the My Access at https://myaccess.microsoft.com/
41+
1. Sign in to the My Access at https://myaccess.microsoft.com/
4242

4343
2. Select **Access reviews** from the menu on the left side bar to see a list of pending access reviews assigned to you.
4444

45-
## Review access
45+
## Review access for one or more users
4646

4747
After you open My Access under Groups and Apps you can see:
4848

@@ -62,7 +62,7 @@ Once that it opens, you will see the list of users in scope for the access revie
6262
6363
There are two ways that you can approve or deny access:
6464

65-
- You can manually approve or deny access for one or more users. You can also mark users as "Don't Know".
65+
- You can manually approve or deny access for one or more users.
6666
- You can accept the system recommendations.
6767

6868
### Manually review access for one or more users
@@ -72,7 +72,7 @@ There are two ways that you can approve or deny access:
7272
1. Select one or more users by clicking the circle next to their names.
7373

7474
1. Select **Approve** or **Deny** on the bar above.
75-
- If you are unsure if a user should continue to have access or not, you can click **Don't know**. The user gets to keep their access and your choice is recorded in the audit logs. It is important that you keep in mind that any information you provide may be available to other reviewers.
75+
- If you are unsure if a user should continue to have access or not, you can click **Don't know**. The user gets to keep their access and your choice is recorded in the audit logs. It is important that you keep in mind that any information you provide will be available to other reviewers. They can read your comments and take them into account when they review the request.
7676

7777
![Open access review listing the users who need review](./media/perform-access-review/user-list-preview.png)
7878

@@ -87,7 +87,7 @@ There are two ways that you can approve or deny access:
8787
8888
### Review access based on recommendations
8989

90-
To make access reviews easier and faster for you, we also provide recommendations that you can accept with a single click. The recommendations are generated based on the user's sign-in activity in the 30-day period before the review started.
90+
To make access reviews easier and faster for you, we also provide recommendations that you can accept with a single click. The recommendations are generated based on the user's sign-in activity.
9191

9292
1. Select one or more users and then Click **Accept recommendations**.
9393

@@ -103,11 +103,11 @@ To make access reviews easier and faster for you, we also provide recommendation
103103
104104
### Review access for one or more users in a multi-stage access review (preview)
105105

106-
If multi-stage access reviews have been enabled by the administrator, there will be 2 or 3 total stages of review. Each stage of review will have a specified reviewer(s).
106+
If multi-stage access reviews have been enabled by the administrator, there will be 2 or 3 total stages of review. Each stage of review will have a specified reviewer.
107107

108108
You will review access either manually or accept the recommendations based on sign-in activity for the stage you are assigned as the reviewer.
109109

110-
If you are the 2nd stage or 3rd stage reviewer, you will also see the decisions made by the reviewers in the prior stage(s) if the administrator enabled this setting when creating the access review.
110+
If you are the 2nd stage or 3rd stage reviewer, you will also see the decisions made by the reviewers in the prior stage(s) if the administrator enabled this setting when creating the access review. The decision made by a 2nd or 3rd stage reviewer will overwrite the previous stage. So, the decision the 2nd stage reviewer makes will overwrite the first stage, and the 3rd stage reviewer's decision will overwrite the second stage.
111111

112112
![Select user to show the multi-stage access review results](./media/perform-access-review/multi-stage-access-review.png)
113113

@@ -117,11 +117,9 @@ Approve or deny access as outlined in [Review access for one or more users](#rev
117117
> The next stage of the review won't become active until the duration specified during the access review setup has passed. If the administrator believes a stage is done but the review duration for this stage has not expired yet, they can use the **Stop current stage** button in the overview of the access review in the Azure AD portal. This will close the active stage and start the next stage.
118118
119119
## If no action is taken on access review
120-
When the access review is setup, the administrator has the option to use advanced settings to determine what will
121-
happen in the event a reviewer doesn't respond to an access review request.
120+
When the access review is setup, the administrator has the option to use advanced settings to determine what will happen in the event a reviewer doesn't respond to an access review request.
122121

123-
- If the administrator set **If reviewers don't respond** to **Remove access**, then the user's access will be removed if you don't take action on the access review request.
124-
- If the administrator set **If reviewers don't respond** to **Take recommendations**, then similar to when you accept recommendations, the user's access with be determined by their sign in activity if you don't take action on the access review request.
122+
The administrator can set up the review so that if reviewers do not respond at the end of the review period, all unreviewed users can have an automatic decision made on their access. This includes the loss of access to the group or application under review.
125123

126124
## Next steps
127125

0 commit comments

Comments
 (0)