Definition
Microsoft Entra access reviews periodically reassess permissions granted to users and guests.
How it works
A review defines scoped resources, reviewers, deadlines and expected decisions. Owners or managers can approve or remove access, with automated application depending on configuration.
Real-world example
Each quarter, a resource owner reviews guest membership in a sensitive group and removes permissions no longer justified.
Limits and best practices
Assign accountable reviewers, monitor overdue reviews and confirm that decisions actually take effect after closure.
Technical detail to remember
A completed access review does not always mean all denied permissions were actually removed. Check decision-application settings and validate group membership after closure, particularly for external guests.