Question

Your organization runs a quarterly access review on a group that grants access to a sensitive finance application. Requirements: the resource owners should review first, and if a reviewer does not respond within the stage duration, the review should escalate to the group members' managers. Some group members do not have a manager attribute populated in Entra ID. You need to configure the access review so that these users are still reviewed and no access decision is left unmade. What should you configure?

Accepted Answer

Create a multi-stage access review with resource owners in the first stage and managers in the second stage, and specify a fallback reviewer for users whose manager is not found.

Answer

Configure the review with 'Auto apply results to resource' disabled and set the default decision to 'No change' so unreviewed users keep their access.

Answer

Use a single-stage review assigned to 'Self-review' so each user attests to their own access, eliminating the dependency on manager attributes.

Answer

Assign the Global Administrator as the sole reviewer to guarantee that every user, including those without a manager, receives a decision.