Microsoft Certified: Identity and Access Administrator AssociateImplement access governanceMedium
A manufacturing company uses Microsoft Entra ID and has implemented access reviews for several critical groups that grant access to production systems. The security team wants to automate the process of removing users from these groups if the reviewers decide that access is no longer needed. They also want to ensure that if reviewers do not respond to an access review, the system automatically removes access for those unreviewed users. Which two settings should be configured in the access review to achieve this?
- AReview frequency: Quarterly, and Reviewers: Group owners
- BSend notifications to reviewers, and Allow access extensions
- CRequire justification, and Allow reviewers to provide recommendations
- DAuto apply results to resource, and If reviewers don't respond: Remove access
Show answer & explanationAnswer & explanation
Correct answer: D. Auto apply results to resource, and If reviewers don't respond: Remove access
To automatically remove access based on review decisions and for unreviewed users, 'Auto apply results to resource' must be enabled, and the 'If reviewers don't respond' setting must be configured to 'Remove access'.
Why the other options are wrong
- A. These settings define the review schedule and who reviews, not the automated action after the review.
- B. These settings are about communication and user flexibility, not automatic access removal.
- C. These settings are about reviewer input, not automatic enforcement of removal.
Access Review Automation Settings
Settings within Microsoft Entra ID access reviews that control how review decisions are enforced and what action is taken for users whose access is not explicitly reviewed.
- 'Auto apply results to resource' automatically enforces approved/denied decisions.
- 'If reviewers don't respond' defines default action for unreviewed users.
- Options for unreviewed users include 'Remove access', 'Take no action', or 'Recommend approval'.
Memory trick: Access reviews: automate cuts, silence means removal.