Implementation of Microsoft Entra - Continuous evaluation of user access

Microsoft Entra Access Reviews enable organisations to efficiently review group memberships, application access and privileged role assignments. Reviews can be configured to run automatically and can be configured to require a reviewer team to manage access or self-review with group members. Access reviews are important to ensure users have the right access to complete tasks within their current role.

Lastly all access reviews can be audited to ensure a detailed history can be accessed to discover why users still require access to resources. During this engagement, ITC will provide guidance on configuring and scoping Access Reviews to ensure groups can resources can be reviewed and only the necessary users require access.

Key activities:

• Week 1 - Discovery workshops
• Week 2 - Low-level design and documentation
• Week 3 - Configuration
• Week 4 - Testing
• Week 5 - Staged Rollout - up to 5 Microsoft Entra groups

Key Deliverables:

• A workshop to gather configuration and additional information.
• Low-level design documentation.
• Implementation and testing of Access Reviews.
• Handover workshop to continue rollout to other groups and resources.

Customer pre-requisites:

• Access to relevant the Customer’s team members.
• All users in scope for Microsoft Entra have the correct licences assigned Microsoft Entra P2.
• Remote access to Microsoft Entra, portal (via B2B with PIM is used or, a dedicated account within the Microsoft 365 tenant or secure remote access tooling such as CyberArk). The following roles are required:
• Microsoft Entra Security Administrator required (granted to ITC or through a customer nominated user).