An example of how you can deploy an Access Package in (Azure AD) Identity Governance!

%3CLINGO-SUB%20id%3D%22lingo-sub-2580079%22%20slang%3D%22en-US%22%3EAn%20example%20of%20how%20you%20can%20deploy%20an%20Access%20Package%20in%20(Azure%20AD)%20Identity%20Governance!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2580079%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHi%20Azure%20%2F%20Microsoft365%20friends%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBefore%20we%20start%20with%20the%20example%2C%20let's%20first%20clarify%20the%20license%20issue.%20In%20order%20to%20work%20with%20an%20Access%20Package%20in%20Azure%20Active%20Directory%20(Azure%20AD)%20Identity%20Governance%20you%20need%20Azure%20AD%20Premium%20P2.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20following%20situation%20from%20a%20customer%20project%3A%3C%2FP%3E%0A%3CP%3EIn%20my%20example%2C%20I%20am%20working%20with%20a%20group%20in%20Azure%20AD.%20You%20can%20also%20work%20with%20Apps%20or%20SharePoint%20Sites.%20Imagine%20that%20a%20group%20named%20%22Bitcoin%20Traders%22%20needs%20to%20be%20managed.%20It%20is%20about%20managing%20the%20members.%20Who%20can%20decide%20which%20users%20can%20be%20a%20member%20of%20this%20group%20or%20not%3F%20The%20IT%20administrator%20or%20the%20owner%20of%20the%20group%3F%20In%20my%20example%2C%20the%20manager%20of%20the%20Bitcoin%20Trader%20team.%20This%20person%20can%20best%20decide%20who%20can%20be%20a%20member%20and%20who%20cannot.%20This%20is%20where%20our%20Access%20Package%20comes%20into%20play!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELet's%20get%20started.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWe%20start%20in%20the%20Azure%20Active%20Directory!%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_1.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298024iCCBC36A9849ABD28%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_1.JPG%22%20alt%3D%22AP_1.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EI%20navigate%20to%20the%20groups.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_2.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298025i28E65E3027382CA3%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_2.JPG%22%20alt%3D%22AP_2.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUnder%20Members%20we%20now%20see%20the%20current%20members.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_14.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298026i26369C424D671688%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_14.JPG%22%20alt%3D%22AP_14.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWe%20go%20back%20to%20Azure%20AD%20and%20click%20on%20Identity%20Governance.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_4.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298027iA1624AE56DF49EEC%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_4.JPG%22%20alt%3D%22AP_4.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EClick%20on%20Access%20packages.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_5.JPG%22%20style%3D%22width%3A%20792px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298028iF42C48BFAAFF6B42%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_5.JPG%22%20alt%3D%22AP_5.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EClick%20on%20New%20Access%20packages.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_6aa.JPG%22%20style%3D%22width%3A%20895px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298030i3A7547A7598063DA%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_6aa.JPG%22%20alt%3D%22AP_6aa.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ESpecify%20a%20name%20and%20description%20(Ich%20arbeite%20mit%20dem%20Standard%20Katalog%20mit%20dem%20Namen%20%22General%22).%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_6a.JPG%22%20style%3D%22width%3A%20930px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298031iEBB7B187D2D23D48%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_6a.JPG%22%20alt%3D%22AP_6a.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EI%20now%20select%20Groups%20(as%20explained%20at%20the%20beginning).%20Check%20the%20box%20so%20you%20can%20see%20all%20the%20groups.%20Select%20the%20appropriate%20group.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_6.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298032i70C94AD55C2C6197%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_6.JPG%22%20alt%3D%22AP_6.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ENow%20we%20determine%20whether%20the%20role%20of%20the%20new%20members.%20In%20my%20case%2C%20I%20select%20member.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_7.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298033i764D9B305A867421%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_7.JPG%22%20alt%3D%22AP_7.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EWhich%20users%20can%20perform%20a%20request%20and%20needs%20an%20approval.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_8.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298034i10CC20D64657829B%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_8.JPG%22%20alt%3D%22AP_8.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EI%20select%20a%20specific%20person%20as%20Approver.%20Since%20the%20Azure%20AD%20users%20do%20not%20have%20a%20manager%20configured%20in%20the%20profile.%26nbsp%3BThe%20approver%20must%20also%20provide%20a%20reason%20for%20the%20approval.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_9.JPG%22%20style%3D%22width%3A%20772px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298035iB5F41AE0203BC332%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_9.JPG%22%20alt%3D%22AP_9.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EI%20now%20select%20the%20person%20(Ed%20Jones).%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_10.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298036i706F80D36F2AB1BC%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_10.JPG%22%20alt%3D%22AP_10.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EOne%20more%20additional%20question%20that%20the%20applicant%20must%20answer%20(but%20it%20is%20optional).%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_11.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298037iCA411F129BC814D1%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_11.JPG%22%20alt%3D%22AP_11.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EHow%20long%20should%20this%20Access%20Package%20be%20valid%20(should%20be%20discussed%20for%20each%20company).%20I%20do%20not%20want%20an%20Access%20Review%20at%20this%20point%20(I%20will%20explain%20another%20time%20%3B-).%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_12.JPG%22%20style%3D%22width%3A%20634px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298038iF7A00EAA4BB47D21%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_12.JPG%22%20alt%3D%22AP_12.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EOverview%20and%20click%20create.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_13.JPG%22%20style%3D%22width%3A%20925px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298039iF180347DA09585CE%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_13.JPG%22%20alt%3D%22AP_13.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ENow%20we%20have%20the%20Access%20Packet.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22TomWechsler_0-1627050989118.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298040i4CC9C3D8FDB27DD5%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22TomWechsler_0-1627050989118.png%22%20alt%3D%22TomWechsler_0-1627050989118.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EUnfortunately%20the%20following%20printscreens%20are%20in%20German%2C%20I%20could%20not%20change%20the%20language%20to%20English.%20Sorry.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ENow%20a%20user%20can%20visit%20the%20website%20%3CA%20href%3D%22https%3A%2F%2Fmyaccess.microsoft.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmyaccess.microsoft.com%3C%2FA%3E%20after%20that%20he%20sees%20the%20following.%26nbsp%3B%3C%2FSTRONG%3E%3CSTRONG%3EThen%20click%20on%20Request%20access%20(highlighted%20in%20yellow)%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_15.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298042iB817DBC9D7D5F564%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_15.JPG%22%20alt%3D%22AP_15.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EThe%20following%20window%20appears.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_16.JPG%22%20style%3D%22width%3A%20318px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298043iA3D855C68CE0DF6B%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_16.JPG%22%20alt%3D%22AP_16.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EThe%20person%20who%20can%20give%20the%20permission%20logs%20on%20the%20website%20%3CA%20href%3D%22http%3A%2F%2Fmyaccess.microsoft.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fmyaccess.microsoft.com%3C%2FA%3E.%26nbsp%3Band%20click%20Approve%20(also%20in%20yellow).%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_17.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298047iA39C9802E6CC2DAE%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_17.JPG%22%20alt%3D%22AP_17.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EThe%20following%20window%20appears%20and%20at%20the%20bottom%20you%20can%20decide%20whether%20to%20grant%20or%20deny%20access.%20In%20my%20case%20approve%20(in%20yellow).%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_18.JPG%22%20style%3D%22width%3A%20319px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298048i6A2CEDDB01A67175%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_18.JPG%22%20alt%3D%22AP_18.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EBack%20to%20Azure%20Active%20Directory%20and%20again%20to%20the%20%22Bitcoin%20Traders%22%20group%20and%20see%2C%20now%20%22Jon%20Prime%22%20is%20a%20member%20of%20this%20group.%20BINGO!%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AP_19.JPG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F298049iAD44B6F18F648FC3%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AP_19.JPG%22%20alt%3D%22AP_19.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20is%20a%20possible%20example%20of%20using%20an%20Access%20Package%20in%20Azure%20Active%20Directory%20(Azure%20AD)%20Identity%20Governance.%20I%20absolutely%20aware%20that%20this%20was%20now%20not%20the%20absolute%20ultimate!%20But%20I%20really%20wanted%20to%20share%20my%20experience%20with%20you.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20hope%20this%20article%20was%20useful.%20Best%20regards%2C%20Tom%20Wechsler%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2580079%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAccess%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
MVP

 

Hi Azure / Microsoft365 friends,

 

Before we start with the example, let's first clarify the license issue. In order to work with an Access Package in Azure Active Directory (Azure AD) Identity Governance you need Azure AD Premium P2.

 

The following situation from a customer project:

In my example, I am working with a group in Azure AD. You can also work with Apps or SharePoint Sites. Imagine that a group named "Bitcoin Traders" needs to be managed. It is about managing the members. Who can decide which users can be a member of this group or not? The IT administrator or the owner of the group? In my example, the manager of the Bitcoin Trader team. This person can best decide who can be a member and who cannot. This is where our Access Package comes into play!

 

Let's get started.

 

We start in the Azure Active Directory!

AP_1.JPG

 

I navigate to the groups.

AP_2.JPG

 

Under Members we now see the current members.

AP_14.JPG

 

We go back to Azure AD and click on Identity Governance.

AP_4.JPG

 

Click on Access packages.

AP_5.JPG

 

Click on New Access packages.

AP_6aa.JPG

 

Specify a name and description (Ich arbeite mit dem Standard Katalog mit dem Namen "General").

AP_6a.JPG

 

I now select Groups (as explained at the beginning). Check the box so you can see all the groups. Select the appropriate group.

AP_6.JPG

 

Now we determine whether the role of the new members. In my case, I select member.

AP_7.JPG

 

Which users can perform a request and needs an approval.

AP_8.JPG

 

I select a specific person as Approver. Since the Azure AD users do not have a manager configured in the profile. The approver must also provide a reason for the approval.

AP_9.JPG

 

I now select the person (Ed Jones).

AP_10.JPG

 

One more additional question that the applicant must answer (but it is optional).

AP_11.JPG

 

How long should this Access Package be valid (should be discussed for each company). I do not want an Access Review at this point (I will explain another time ;-).

AP_12.JPG

 

Overview and click create.

AP_13.JPG

 

Now we have the Access Packet.

TomWechsler_0-1627050989118.png

 

Unfortunately the following printscreens are in German, I could not change the language to English. Sorry.

 

Now a user can visit the website https://myaccess.microsoft.com after that he sees the following. Then click on Request access (highlighted in yellow)

AP_15.JPG

 

The following window appears.

AP_16.JPG

 

The person who can give the permission logs on the website http://myaccess.microsoft.com. and click Approve (also in yellow).

AP_17.JPG

 

The following window appears and at the bottom you can decide whether to grant or deny access. In my case approve (in yellow).

AP_18.JPG

 

Back to Azure Active Directory and again to the "Bitcoin Traders" group and see, now "Jon Prime" is a member of this group. BINGO!

AP_19.JPG

 

This is a possible example of using an Access Package in Azure Active Directory (Azure AD) Identity Governance. I absolutely aware that this was now not the absolute ultimate! But I really wanted to share my experience with you.

 

I hope this article was useful. Best regards, Tom Wechsler

 

 

0 Replies