User access reviews for Microsoft 365 must have the following prerequisites:
Drata pulls user access review applications from Microsoft Entra applications in Azure. These applications are typically located under “Enterprise Applications” in Azure.
Verify which applications Drata can automatically pull from Microsoft 365. For more details on these applications, refer to the Azure Application Gallery in your Azure instance.
Microsoft Entra provides user attribute data based on how SSO apps are configured in Azure; this data may not be available for all applications.
If your IT team has chosen to provision access outside of Microsoft 365 (most likely directly in the source application), you can manually upload user data.
Drata’s user access review functionality also supports Microsoft 365 GCC High.
Now, you can set up your user access review.