Access reviews should also apply to Directory access
Access Reviews should let you review guest users access on the directory level. Using a dynamic group with all guest users in it, I should be able to have access reviews DELETE the user from the Azure Active Directory rather than just removing the user from a group.
Hi Sigurd, thanks so much for the feedback! If you could reach out to me I would love to chat more to understand your use case and have you participate in our private preview of the delete scenario.
Robert Young commented
We have the exact same use case and are looking for a way to enforce guest users in our tenant to review and approve that they still need access to our tenant.
Priyank Dhutia commented
Any progress on this?
To simply this, Guest users are heavily used in conjuction with SharePoint Online. SPO doesnt necessarily depend on Azure AD groups to grant permissions. Removing a user from an Azure AD group would not really help here, however if this could be done in a way that the user is blocked from signing in/disabled this would really help for guest SPO users.