Created by Claude - please verify

Access reviews - every review definition with its most recent instance and that instance's decisions.

Required Microsoft Graph permissions

AccessReview.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P2 or Microsoft Entra ID Governance.

Endpoints: GET /v1.0/identityGovernance/accessReviews/definitions · GET .../definitions/{id}/instances · GET .../instances/{id}/decisions

Only the latest instance of a recurring review is checked. Reviews of guests in all Microsoft 365 groups can have thousands of decisions - reading them takes a while on the first load.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Access Review Health

An access review only removes access when reviewers answer and the decisions are applied. Overdue reviews, items nobody decided, and reviews configured without auto-apply or a default decision look like governance on paper but change nothing.

No access reviews are configured.