Forum Discussion

nipW's avatar
nipW
Brass Contributor
Jun 13, 2018

Azure AD access reviews

Hi All,

Our organization using O365 and we are planing to allow all staff to create groups on our tenant as we would like to roll out Team, Planner and Power BI. Now I m in the middle of setting up some group policies such as naming convention, group expiry etc. Also, I would like to enable Azure AD access reviews and notified group owners to review it periodically.

But my question is how can I keep create an access review for individual groups that are created by our staff, how do I know how many groups has been created daily basis, etc. Can some on please tell me what is the best way to handle this.

The other question is, are there any best practice of creating O365 Groups. 

Thanks.

azure
  • Yash Goel's avatar
    Yash Goel
    Copper Contributor
    Jun 13, 2018

    Hi Nipuna,

     

    dont think there is off the shelf solution to generate the report about number of groups getting created,  there are third party reporting tools which you can explore for sure. 

     

    regarding your question about triggering an access review automatically again the answer is unfortunately is no.

     

    now about best practices for creating o365 groups, there are basically two approaches

     

    you throw it open to the users where in they can just create groups from outlook or SharePoint, which most of the orgs use these days as it gives a breather to administrators.

     

    but if you want to give the group creation control to users then I would suggest that you create a simple form in SPO tied to a flow ( which can include necessary approvals ) which in turn triggers a logic app or azure function to provision a group for the request.

     

    Thanks

Share