Microsoft Certified: Identity and Access Administrator AssociateImplement access governanceEasy
A software development company uses Microsoft Entra ID and has implemented access reviews for several critical groups that grant access to source code repositories. The security team wants to ensure that these access reviews are conducted quarterly and that any users whose access is not explicitly approved by the reviewer are automatically removed from the group. Which two settings should be configured in the access review to meet these requirements?
- AReview frequency: Quarterly; Upon completion settings: Ask for recommendations
- BReview frequency: Monthly; Upon completion settings: Take no action
- CReview frequency: Quarterly; Upon completion settings: Auto apply results to resource
- DReview frequency: Yearly; Upon completion settings: Disable user
Show answer & explanationAnswer & explanation
Correct answer: C. Review frequency: Quarterly; Upon completion settings: Auto apply results to resource
To meet the 'quarterly' requirement, the 'Review frequency' should be set to Quarterly. To ensure unapproved users are automatically removed, the 'Upon completion settings' should be configured to 'Auto apply results to resource', which automatically revokes access for denied users.
Why the other options are wrong
- A. Asking for recommendations doesn't guarantee automatic removal of unapproved users; 'Auto apply results' is needed for that.
- B. Monthly frequency does not match 'quarterly', and 'Take no action' would not remove unapproved users.
- D. Yearly frequency does not match 'quarterly', and 'Disable user' is too broad if only group access needs to be removed.
Access Review Automation Settings
Configurations within Microsoft Entra access reviews that define how often reviews occur and what actions are automatically taken based on review outcomes.
- Includes review frequency (e.g., weekly, monthly, quarterly).
- Defines actions upon completion (e.g., auto apply results, take no action).
- Automates access governance processes.
Memory trick: Automated Reviews Keep Access Fresh.