Entra ID Access Reviews

Challenge

With over 100 external users collaborating across the tenant, many identities were unmanaged and potentially unprotected. Additionally, cloud apps previously granted access by users had accumulated without oversight. The goal was to enforce governance and reduce risk exposure.

Tools & Technologies

• Microsoft Entra ID Access Reviews
• External Identity Governance
• Application Access Review Policies
• Admin Consent Workflow
• Audit Logs & Review History

Implementation

1. Created access review policies for external users
2. Assigned reviewers based on business collaboration ownership
3. Reduced external identities from 100+ to 60 based on review outcomes
4. Reviewed app permissions previously granted by users
5. Changed app access setting from “users can grant” to “users can request from admin”
6. Removed stale and unused cloud apps from tenant access

Architecture Diagram

This placeholder diagram will be replaced with the final version:

Impact