Michael Brine

My feedback

  1. 4 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Azure Active Directory » Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →

    Hi Niket,

    Thanks for the suggestion! Good news is that both of your asks are on our roadmap! Are you using Log Analytics in AAD? We’re working to integrate with the user login data in log analytics and surface those in our recommendations.

    As for line managers as reviewers, does your tenant have the manager attributed populated for your users? Great if you are, because we’re working on pulling that info from the user profile page.

    - Fionna

    An error occurred while saving the comment
    Michael Brine commented  · 

    Are there any updates to adding the manager as the reviewer?

    Michael Brine supported this idea  · 
  2. 17 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    An error occurred while saving the comment
    Michael Brine commented  · 

    This is a great idea, this could be achieve using Dynamic Security Groups and assigns these to the resources to want allotted by default.

    Though an issue with this approach is that your likely to manage access to the resource via Access Packages and Dynamic security groups making auditing difficult as Access review would return results from both Dynamic Security groups and Access Package and not allow either to process the final review decision.

    Michael Brine supported this idea  · 
  3. 18 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  Azure Active Directory » Access Reviews  ·  Flag idea as inappropriate…  ·  Admin →

    Hi Justin, thanks for the feedback! It will definitely be helpful to have managers as the reviewers, there is a “manager” attribute in AAD’s user profile, but it’s currently a string only. We are working to improve the architecture first, then we can leverage the data to automatically assign managers to be reviewers. If you have any more feedback or questions on this, feel free to comment on this thread or email accessreviews@microsoft.com.

    Michael Brine supported this idea  · 
    An error occurred while saving the comment
    Michael Brine commented  · 

    I am also keen to get an update to this planned feature as current solution requires multiple policies and Dynamic Security groups to achieve a similar effect.

Feedback and Knowledge Base