Accelerate access reviews with the newest Security Copilot agent in Microsoft Entra—now in public preview.
Access reviews just received a major upgrade. With the introduction of the Microsoft Security Copilot Access Review Agent in Microsoft Entra, we’re bringing the power of AI directly into the heart of access governance. No more static lists or disconnected portals—reviewers are guided through decisions in a natural, conversational flow right inside Microsoft Teams.
Access reviews are critical for compliance but often a checkbox exercise. Reviewers face long lists of users and entitlements with little context, leading to rubber-stamping and missed risks. The Access Review Agent tackles this problem head-on by analyzing sign-in activity, peer group changes, and unusual access patterns to highlight where action is actually needed. Instead of spending hours reviewing every line item, reviewers get focused, data-driven recommendations so they can confidently approve the right access and remove what’s no longer needed, improving both security and compliance.
Access Review Agent: Faster, smarter, more secure reviews
The Access Review Agent transforms how reviews are conducted by handling the time-consuming analysis for you, from assessing sign-in activity and peer group changes to spotting unused entitlements and unusual access patterns. Instead of sifting through raw data, you get clear, data-backed recommendations that help you scale reviews, close compliance gaps, and keep only the right people in the right roles.
Access Review Agent helps you:
- Simplify the review process with AI: This agent applies human-like reasoning to flag role changes, anomalies, and usage trends—surfacing focused, actionable summaries that help your reviewers zero in on what matters most.
- Collaborate naturally and review confidently: Integrated with Microsoft Teams, the agent enables natural language Q&A, making reviews more intuitive, conversational, and accessible.
- Strengthen security, reduce attestation fatigue: By cutting manual analysis and surfacing clear recommendations, the agent accelerates decisions while keeping your reviewers in control, reducing fatigue and improving compliance.
All recommendations are delivered to your reviewers directly in Teams, so they can act without switching between various screens, and every decision is backed by real data. The result? Faster, more confident decisions that reduce risk and ease the burden on your team.
From setup to decision: A walkthrough scenario of AI-driven access reviews
Contoso Financial is focused on strengthening its access governance processes across critical systems and roles. With growing complexity and scale, the Identity team needs a way to reduce manual effort, improve decision quality, and ensure the right people have the right access, without slowing down the business.
Figure 1: Access Review Agent is available in the Entra Admin center and can be quickly deployed
Deployment by the administrator
Connie, an administrator on Contoso’s Identity team, enables Access Review Agent directly from the Microsoft Entra admin center. With no need for retraining or new systems, Connie configures the agent to assist with access reviews for high-impact groups and applications, including finance, HR, and customer data platforms.
Once deployed, Connie leverages the agent's activity map to gain insight into its reasoning, helping her understand the recommendations and justifications it has prepared for the organization's reviewers. This transparency builds trust, empowering Connie to confidently enable the agent for all reviewers in the organization
Figure 2: Access Review Agent Activity map
The reviewer experience in Microsoft Teams
Violet, a finance manager at Contoso, typically dreads access reviews. They can be tedious, time-consuming, and often feel like guesswork. But this time, things are different.
When Violet needs to conduct an access review, she opens Microsoft Teams and starts a conversation with Access Review Agent. The agent immediately provides a focused summary of her review items, highlighting which users haven’t accessed key systems recently, where access looks unusual, and how each user compares to their peers.
As Violet reviews the information, the agent continues to surface relevant context and signals that help her understand why each access matters. With everything presented clearly in the flow of conversation, Violet quickly identifies which users no longer need access and completes the review, all without leaving Teams
Figure 3: Access Review Agent assist reviewers with access reviews using natural language within Microsoft Teams
Outcomes
With Access Review Agent:
- Connie orchestrates reviews intelligently, with continuous oversight and AI-powered summaries.
- Violet makes informed, confident decisions in the flow of work.
- Contoso improves governance, reduces review fatigue, and enforces access policies with precision.
This scenario highlights how the Access Review Agent transforms access governance from a manual burden into a streamlined, intelligent process — helping Contoso maintain security and compliance while empowering its teams to act faster and smarter.
Beyond Access Review Agent
Modern access governance isn’t just about reviewing who has access—it’s also about giving managers and approvers the tools to actively shape and safeguard their teams’ permissions. While we continue releasing new agents to enhance visibility and decision-making, we’re also improving the end-user experience, making it easier than ever for your organization to ensure employees have the right access, at the right time, with the right oversight.
New capabilities for managers and approvers
Public preview
- Revoke access previously approved, making it easy to correct mistakes or respond to changes.
- Delegate review tasks to others using self-service tools, so access reviews aren’t delayed when someone is out.
Generally Available
- Request access packages for direct reports, streamlining onboarding and role transitions.
- View and manage team access in My Access, including the ability to revoke access for specific packages.
These enhancements are designed for ease of use, empowering managers and IT admins to act quickly, confidently, and securely. By leveraging these features, organizations can enforce least privilege, respond to changes proactively, and maintain a robust access governance posture.
Together with Access Review Agent, these new capabilities give organizations more ways to simplify access management, strengthen security, and support teams in a fast-changing environment.
Smarter governance starts here
Access governance doesn’t have to be slow, manual, or reactive. With Access Review Agent in Microsoft Entra, you can move beyond checklist-based reviews to intelligent, AI-powered decisions—all delivered in the flow of work.
Whether you're an identity professional orchestrating enterprise-wide reviews or a manager making quick, informed calls in Teams, this agent brings clarity, speed, and confidence to every decision.
Now’s the time to simplify your reviews, strengthen your security posture, and free your teams from unnecessary friction. Learn more, explore the preview, and start putting Access Review Agent to work, because smarter and stronger access governance is better with AI.
Deep dive into this innovation and more at Microsoft Secure on September 30, October 1, or on demand. Then join us at Microsoft Ignite, November 17–21 in San Francisco (or online), for more innovations, hands-on labs, and expert connections.
-Manmeet Bawa, Partner Director Product Management
Read more on this topic
- Microsoft Security Copilot Access Review Agent in Microsoft Entra - Microsoft Entra ID Governance | Microsoft Learn
- Microsoft Entra Suite Trial - Sign up
- Microsoft Entra Suite Trial Guide
Learn more about Microsoft Entra
Prevent identity attacks, ensure least privilege access, unify access controls, and improve the experience for users with comprehensive identity and network access solutions across on-premises and clouds.
Microsoft
