Access reviews are a great feature to efficiently manage group memberships, access to enterprise applications, and privileged role assignments. For example, you can perform the following tasks:
- Evaluate guest user access by reviewing their access to applications and memberships of groups. And with this info decide whether guests should have continued access.
- Evaluate employee access to applications and group memberships
- Collect access review controls into programs that are relevant for your organization to track reviews for compliance or risk-sensitive applications.
- Evaluate the role assignment of administrative users who are assigned to Azure AD roles such as Global Administrator or Azure subscription roles.
Access reviews are great, aren’t? The only thing that you have to take into account to enable them in your tenant is that: are available with the Premium P2 edition of Azure AD, which is included in Microsoft Enterprise Mobility + Security, E5.