Forum Discussion
Mark_Wahl
Aug 15, 2019Microsoft
Example how to create Azure AD access reviews using Microsoft Graph app permissions with PowerShell
The Azure AD access reviews feature is part of Microsoft Graph, with a list of methods at https://docs.microsoft.com/en-us/graph/api/resources/accessreviews-root?view=graph-rest-beta. An earlier blo...
frenjd
Copper Contributor
When I use this script, the owner of the access review is set as [].
The access review is created, but the reviewer is never notified via email and if the login to the access review portal, they do not see the access review that has been created.
I have tried many variations to set the Access Review owner, but none of them work. Any Ideas?
Thanks
The access review is created, but the reviewer is never notified via email and if the login to the access review portal, they do not see the access review that has been created.
I have tried many variations to set the Access Review owner, but none of them work. Any Ideas?
Thanks
TrynaDoStuff
Aug 15, 2024Copper Contributor
frenjd You cannot set the owner of the Access Review in this method, as it is created by a Service Principal/App registration, not by a user. The App cannot then sign into Entra, as it is not a user. There is no way to manually set it via API or PowerShell.
If you setup the Review to ask the Group Owners to review, that will work, and they will get the notificatin to renew/approve members. You can also setup "fallback reviewers" in case the owners are gone.