Access reviews based on sensitivity label applied to group

Iron Contributor

Hi all,

 

We have deployed sensitivity labels that grant less restrictive access types (i.e. public) to Microsoft 365 groups.  We have a compliance requirement for annual owner recertification of those groups. 

 

Is it possible to use AAD access reviews to require owners of those groups to annually recertify the need for the less restrictive label?  Ideally, if they respond that the less restrictive access is no longer needed, or if they don't respond, the label would be changed to a more restrictive label.  I'm not looking to review membership of the group, but rather the need for the group to have the less restrictive label.

 

Thanks!

0 Replies