User access reviews for Microsoft 365 must have the following prerequisites:
User access review applications can be pulled from the Microsoft Entra applications found in Azure. The applications are generally found in Azure under “Enterprise Applications”.
Verify the apps Drata can automatically pull from Microsoft 365. To learn more about these Microsoft Entra applications, refer to Azure Application Gallery found in your Azure instance.
Microsoft Entra provides user attribute data based on how SSO apps are set up in Azure and might not be applicable for certain applications.
If your IT team has chosen to provision access outside of Microsoft 365 (most likely directly in the source application), you can manual upload or rely on future direct connections.
Now, you can set up your user access review.