Access Reviews Deep Dive - AZ-500/SC-300

Deep dive look at Access Reviews including all you need to know for AZ-500 and SC-300.
Microsoft documentation at docs.microsoft.com/en-us/azur....
00:00 Introduction
00:26 Lifecycle of an account
02:21 Types of assignment
05:05 Access review overview
08:50 Licensing
11:54 Automating provisioning if possible
15:01 Using access reviews
17:10 Access review for group/applications
28:23 AAD or ARM role access review
35:34 Access package access review
37:21 Access review history reporting
40:16 Summary and close

[@sa77if]

John, you are the man...

[@ngophuthanh]

Another hit from John. Everything about Access Control has become clear after watching this episode. Thanks a lot, John.

[@NTFAQGuy]

Glad it was helpful!

[@rosariograsso9735]

Great content, John. I love the explanation of the different locations based on the type of reviews.

[@maryjane4012]

Saving this one to watch later - thank you . Keep going with the security videos!

[@NTFAQGuy]

Enjoy!

[@arturogonzalez7744]

Thanks John for the great quality content that you share!! It's pretty clear and very useful.

[@matthewdavis9125]

Thanks for this and all the other videos you put out. Used a good mixture of your KZbin videos, your Pluralsight courses, reading the docs and hands on practice to pass the SC-300 today. Cheers for passing on your knowledge, skills of teaching and explaining these topics and online mentoring!

[@NTFAQGuy]

My pleasure, thanks for watching 🤙

[@iamdedlok]

Wow, thanks John! This was so information dense. Even though I am not preparing for the Az-500 / SC-300 - this is going to be useful to me as my goal is to work towards becoming an architect. Lot of this stuff was new to me. I need to come and rewatch this again.

[@NTFAQGuy]

Glad it was interesting. Thanks!

[@tony6626]

Fantastic coverage - useful as im working towards the SC-300. Thank you for the great content you share, wishing you and your loved ones a great Christmas!

[@NTFAQGuy]

Thank you, and to you!

[@NSP-3301]

John your videos have been instrumental to my early journey into Azure... it's deep dives like this make my time building a strong Azure foundation much much easier!

[@NTFAQGuy]

Great to hear!

[@kahendyzhong]

Thank you John. Highly recommended.

[@igormatic7896]

I knew that i should watch your video first before i start implementing access reviews in my organization :). The info about external identities and linked subscriptions is probably something that many of us are looking for. Thank you John, great as always!

[@NTFAQGuy]

Glad it was helpful!

[@yulaw3289]

enjoying this video for today learning, thanks a lot!

[@Semtx552]

haha incredible! i have the SC-300 exam tomorrow and looked for some access review details. then you posted this vid with all the details! thanks so much John!

[@NTFAQGuy]

Nice and good luck!

[@Semtx552]

@@NTFAQGuy Passed it :) thanks again!

[@NTFAQGuy]

@@Semtx552 congrats

[@azeddinetarifet3571]

You have just gained +1 subscribers. Awesome content as always, thanks for your efforts!

[@NTFAQGuy]

Great, thank you 🤙

[@thtgrldiana6388]

Really great learning session! demos mixed with concept really help beginners like me understand how things work!!

[@NTFAQGuy]

Great, thank you

[@mrrandrade]

Awesome content as always!

[@NTFAQGuy]

Thanks!

[@shankargurav]

thanks John, wonderfully explained.

[@NTFAQGuy]

Glad it was helpful!

[@faouzigassemi6222]

Excellent ! so interesting as usual ....

[@NTFAQGuy]

Thanks!

[@ZATennisFan]

I writing SC300 soon so I'm binge watching your stuff...

[@NTFAQGuy]

Good luck

[@nickolasjordan7949]

Mr. Savill! Great videos. I'm taking SC300 next week and your content is very helpful. If you have any other suggestions for videos to view for the SC300 exam, please let us know! Thank you for your hard work and I look forward to whatever else you have in store!

[@NTFAQGuy]

Good luck!!!

[@nickolasjordan7949]

@@NTFAQGuy I passed! I passed PRIMARILY because of your content. You make this stuff easy to understand. You have a fan and lifetime subscriber/evangelist in me. THANK YOU.

[@NTFAQGuy]

@@nickolasjordan7949 awesome, congrats!

[@adityapathak4193]

@Nickolas Jordan - in terms of preparation for SC-300 , what resources did you use ?

[@abdelalielghazrani5956]

I wish that I'll have the same of your level of IT information and skills.

[@ManiKumar-nn2xk]

Thank you John. This could replace Sailpoint IIQ solution for access reviews.

[@pokmnhyu]

Hi John, Great video. Just curious whether you have anything around how and where all different permissions or roles being assigned to the users or applications.

[@NTFAQGuy]

Governance masterclass episode. Many other RBAC videos on channel as well.

[@markettawright6449]

Hi John: I have a scenario question for Access Reviews. Say you configure for guests and managers perform the reviews. The access review is set to disable and delete after 30 days for denied responses. If a manager made that response inadvertently or changed their mind later and you go back set the 'block sign in' to no, how do you make sure that the the flag to delete the account by the access review is reset so that it doesn't delete the account after 30 days? Or did your action to change the block sign in from yes to no become the trigger to not delete the account because of the access review.

[@NTFAQGuy]

docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-external-users#create-access-reviews-for-external-identities talks about this scenario if I'm understanding you. You can review at the end and choose what to do.

[@markettawright6449]

@@NTFAQGuy Precisely! They state in this article 'in case you wanted to reinstantiate the external user, their ability to log on can be reconfigured' but they never say how. I'm assuming its the change block sign in from yes to no that does it. I may have to try it out and wait 30 days to see what it does.

[@spop1974]

Hi John. If I do a review for 10 users, do I need to have P2 assigned to these specific users or is it enough to have total of 10 P2 licenses (which can be unassigned or assigned to some other users)?

[@NTFAQGuy]

Docs answer this explicitly. Just do a quick search next time :) docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#license-requirements