Recurring privileged role access review

%3CLINGO-SUB%20id%3D%22lingo-sub-2677659%22%20slang%3D%22en-US%22%3ERecurring%20privileged%20role%20access%20review%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2677659%22%20slang%3D%22en-US%22%3E%3CP%3ECould%20anyone%20share%20their%20experience%20in%20managing%20recurring%20privileged%20role%20access%20reviews%3F%20I%20note%20a%20separate%20access%20review%20is%20created%20per-role%20which%20means%20changing%20any%20settings%20or%20even%20deleting%20these%20individual%20reviews%20is%20too%20cumbersome%20e.g.%2C%20consider%20access%20review%20created%20for%2015%20roles.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20do%20you%20manage%20any%20changes%20to%20review%20settings%3F%3C%2FP%3E%3CP%3EIs%20there%20a%20better%20way%20to%20delete%20review%20series%20or%20each%20review%20in%20the%20series%20have%20to%20be%20deleted%20individually%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2677659%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPrivileged%20identity%20management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2677841%22%20slang%3D%22en-US%22%3ERe%3A%20Recurring%20privileged%20role%20access%20review%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2677841%22%20slang%3D%22en-US%22%3ELast%20time%20I%20attempted%20to%20use%20it%20was%20a%20year%20or%20so%20ago%2C%20and%20actually%20stopped%20using%20it%20because%20of%20the%20fact%20we%20had%20to%20have%20individual%20access%20reviews%20for%20roles.%20Someone%20made%20a%20mistake%20when%20scheduling%20it%2C%20and%20it%20keeps%20being%20a%20lot%20of%20work%20to%20fix%20these%20things.%20Having%20said%20that%2C%20if%20I%20had%20to%20re-do%20it%20now%20(which%20I%20likely%20will%20have%20to%20in%20the%20coming%20months)%2C%20I%20would%20probably%20only%20target%20very%20high%20value%20roles%2C%20like%20Global%20Administrator%20and%20a%20few%20others.%3C%2FLINGO-BODY%3E
Frequent Contributor

Could anyone share their experience in managing recurring privileged role access reviews? I note a separate access review is created per-role which means changing any settings or even deleting these individual reviews is too cumbersome e.g., consider access review created for 15 roles.

 

How do you manage any changes to review settings?

Is there a better way to delete review series or each review in the series have to be deleted individually?

2 Replies
Last time I attempted to use it was a year or so ago, and actually stopped using it because of the fact we had to have individual access reviews for roles. Someone made a mistake when scheduling it, and it keeps being a lot of work to fix these things. Having said that, if I had to re-do it now (which I likely will have to in the coming months), I would probably only target very high value roles, like Global Administrator and a few others.
Thank you for the insights.