Create Access Reviews for Admin1 in Azure Active Directory
Question
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.
Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.
You need to ensure that the Admin1 can create access reviews in contoso.com.
Solution: You purchase an Azure Directory Premium P2 license for contoso.com.
Does this meet the goal?
Explanations
Yes, purchasing an Azure Directory Premium P2 license for contoso.com will meet the goal of allowing Admin1 to create access reviews in the Azure Active Directory admin center.
Azure AD Premium P2 provides advanced identity and access management capabilities, including Identity Governance. Identity Governance allows for the creation and management of access reviews, which is the functionality that Admin1 is attempting to access.
Without an Azure AD Premium P2 license, access to Identity Governance features, including access reviews, is restricted. In this scenario, all other Identity Governance settings are available, indicating that the tenant has some level of Azure AD Premium licensing, but not the P2 license required for access reviews.
By purchasing an Azure AD Premium P2 license, the tenant gains access to all Identity Governance features, including access reviews. Assigning Admin1 appropriate permissions to perform access reviews will then allow them to create and manage these reviews in the Azure Active Directory admin center.
