Generate access certification reports for compliance workflows and quarterly reviews.
Related topics
access review
access certification
user access report
sox compliance
access audit
About this tool
The Access Review Report generates user access certification data for compliance workflows. Export who has access to which SharePoint sites and content for manager review and certification.
Create access matrices that can be distributed to department managers for quarterly access certification. Track certification status and identify access that hasn't been reviewed.
Essential for SOX, HIPAA, and other compliance frameworks requiring regular access certification.
Key features
User access matrix
Department-level views
Manager certification workflows
Access aging analysis
Certification tracking
Compliance reporting
Bulk export support
Historical comparison
Use cases
.
.
.
Graph scopes
undefined (application), undefined (application).
Tool identity
Slug: access-review.
Category: audit.
Plan tier: pro.
Editions: cloud, desktop.
SKUs: security, suite.
Documented scenarios: 3.
Declared features: 8.
Graph permissions requested: 2.
Licensing & access
Requires a paid edition (security). The Suite bundle includes this tool alongside every other capability in the catalogue.
Limitations & out-of-scope
Access Review Report: Detective control only: findings are reported, never auto-remediated. Severity rankings use the documented heuristic and may diverge from Microsoft Secure Score. Detection coverage stops at the Graph permission surface declared above — workloads behind tenant-licensed add-ons (Defender XDR, Purview eDiscovery Premium) require the matching license to enumerate.