Azure Active Directory

Welcome to the Azure Active Directory suggestions and feedback site! We love hearing from you. If you have suggestions, please submit an idea or vote up an idea. We are monitoring the site actively.

Thank you for joining our community and helping improve Azure AD!

Wehave a new log in experience integrated with Azure AD, and we stronglyrecommend you log in with your Azure AD (Office 365) account. If yourUserVoice account is the same email address as your Azure AD account, yourprevious activities will be automatically mapped to your Azure AD account.  You can read more here for details: https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Putting-customers-first-for-f...

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Group Owner is Inactive and disabled

    We have a challenging situation to manage group owners in Azure Active Directory. If a person leaves organization, his/her identity will be set to "disabled" state. Is there a way automatic emails can be sent to admins notifying Group Owner ID is disabled for all the managed groups?

    2 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →
  2. 1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →
  3. Outlook OST Recovery tool

    ATS OST to PST Converter coupon code software is easy to use for the conversion of OST to PST. With the help of this utility, you can access your data in a safe manner without losing any information. This software does not create any difficulty while you convert the data. It has a simple interface which makes it easy to use.
    It supportable with MS Outlook version 98, 2000, 2002, 2003, 2007, 2010, 2013, 2016 and 2019. It backing the version of MS Exchange Server up to 2016. With the aid of this tool you can convert encrypted and password…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →
  4. PIM Access Review for Azure Resources need more flexibility

    There needs to be a way to set "Reviewers" to a standard role so that is dynamically updated when role membership changes. For example, we have a policy where Owners perform the access reviews. We need to manually go in and ensure the Reviewers match the current ownership on a periodic basis. The hard-coding of email address is a problem

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →
  5. Negative use of this app and services.

    If anyone reads this , maybe monitor a little more closely and who is being affected and make their life upside down because of this unsupervised use of such apps / app illegal use of this and the hands that wheel it is so wrong in undescribable ways

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →
  6. 我本人电话号码已经更改,不同于前面98结尾的电话号码了。变更电话的操作方法请告知,谢谢!WANGJIPING

    我本人电话号码已经更改,不同于前面98结尾的电话号码了。变更电话的操作方法请告知,谢谢!WANGJIPING

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →
  7. Access Review to delete user account

    We use access reviews to monitor 3rd party Office 365 accounts and licences. The users are in a security groups that assigns the licences. So if they are denied as part of the access review they are removed form the security group so their Office 365 licences are removed.

    Is there a way to also delete the user accounts as part of the process

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →

    Hi Nikki,

    Thanks for the feedback! If you’d like to delete the user in addition to removing the user from the resource (group), we are running a private preview on this exact feature, and we’d love to have you try it!

    Please fill out this form for tenant info and we’ll whitelist you for the preview – https://forms.office.com/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbR5dv-S62099HtxdeKIcgO-NUMzE4VzM2QllPTkxTVjRWOUFCMEZLQzJPVy4u

    Thanks
    Fionna

  8. access reviews

    In access reviews, it would be helpful to see the current status of the account. For example, we have accounts that are recommended for "Deny" but in AAD the account is already blocked from signing-in.

    Also accounts surface in the access review that have been removed from AAD.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →

    Thanks for submitting the feedback!

    You’re right that currently we don’t reflect the status of the account in real time, because when the review is created we take a snapshot of the users in the review right before the review starts, so the reviewers get a view of the user’s activity X days before the review. This has been an audit requirement for some customers. I’d like to hear more about your use case in dynamically updating the user’s status, and how that contributes to your audits (if any).

    We’ll keep this feedback in mind when planning, thanks again!
    - Fionna

  9. Show users Department and or Job Title in Access Review

    Many of my reviewers have noted it would be a lot easier to complete the review if they knew the department a particular user was from or their job title. Adding this information to the report seems like an easy fix.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →

    Hi Sam,

    Thanks for this suggestion! We are on the same page with you – having more information such as department and job title will be very helpful for reviewers. It would be an easy fix on us if we call pull that data from Azure AD. Question for you – are those 2 attributes populated in your Azure AD user profiles? Do you manually fill them in when a user is added, or does your HR data automatically feed into Azure AD?

    - Fionna

  10. Allow the ability to increase the default 30 day review time frame:

    Hi, would be very beneficial if we can increase the time frame Access Reviews checks. At the moment the time frame is 30 days. It would be great to give the options for reviews that check time frames that are 3 months / 6 months / 12 months.

    Example: Long term sickness

    Would also help in creating accurate user to application assignments.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →
  11. Build custom access review

    As a user I should be able to upload a CSV file containing:

    Users
    Groups
    User and Group relationship

    I should be able to launch an access review based on above files. I should be able to select reviewers based on AAD identities or specify them in the file.

    Most ID governance tools have this function built in.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →
  12. Implement Access Review for Exchange Online

    Allow to do an Access Review directly on Mailboxes and their Full or Send As Permission (Others Settings would also be interesting).

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →

    Hi Stefan,

    Thanks for the feedback! Could you please elaborate more on your use case? Is it the user’s permissions within exchange that you’d like to review? You’d still want the user to use exchange but limit/remove their “send as” permissions? Would love to learn more!

    Thanks
    Fionna

  13. Access Reviews: Azure recommendations

    The recommendation given by Azure in Access Reviews is based on user's activity ONLY in Azure and not specifically based on the Admin role activity that is being reviewed. Access reviews should give you the recommendation based on user activity with the role, otherwise, any user that logs into Azure but don't activate their role, will never be catch by the Azure recommendation(inactive for 30 days), is that make sense ?

    Also, the Azure PIM alerts gives you very little possibilities. We can't export, store the information, would be great having more option on that, or at least exposing via…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →

    Hi Johnny,

    Thanks for the detailed feedback! Yes, it makes a lot of sense to scope the recommendations to user’s activity in the role being reviewed, and we are working to collect more insights on user’s activity in addition to signing in. It’s in our roadmap and we will update here when we have a preview to share!

    Regarding your comment on PIM alerts, I have directed your feedback to our PIM team, if you any more questions on the development of the alerts, please don’t hesitate to email pim_preview@microsoft.com!

    - Fionna

  14. Integrate with Microsoft Flow for Customizing Emails and Approvers

    Right now, you can only do out of the box emails and approvals. Integrating as an application from flow will allow you to create different approval processes as needed; and customize email messages as needed.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →

    Hi Justin, thanks so much for the feedback! We currently use AEO (Azure email orchestrator) for sending emails, I can see how Flow can be helpful here, will look into it with the team, thanks for the suggestion! Do you know any services customizing their emails using Flow? I would love to know!

    /Fionna

2 Next →
  • Don't see your idea?

Feedback and Knowledge Base