Question

Contoso invites hundreds of external guests each quarter for collaboration projects. Compliance requires that guest access to a set of sensitive Microsoft 365 groups be validated every 90 days, that reviewers see system guidance based on the guest's sign-in activity, and that any access the reviewers do not approve is removed automatically without manual follow-up. Which access review configuration meets all of these requirements?

Accepted Answer

Create a recurring access review with a quarterly recurrence scoped to guest users, enable 'Require reviewer justification' and 'Show recommendations', and set the auto-apply action for denied users to 'Remove access'.

Answer

Create a one-time access review scoped to guest users, assign group owners as reviewers, and enable 'Apply results to resource' manually after completion.

Answer

Configure a recurring access review scoped to all members, set reviewers to self-review, and choose 'No change' as the action when reviewers don't respond.

Answer

Use entitlement management access package expiration policies to remove guest access after 90 days instead of an access review.