Skip to main content

User Access Reviews for Microsoft 365

Ensure the following prerequisites are met before setting up Microsoft 365 for user access reviews.

Updated over 2 weeks ago

User access reviews for Microsoft 365 must have the following prerequisites:

  • Drata pulls user access review applications from Microsoft Entra applications in Azure. These applications are typically located under “Enterprise Applications” in Azure.

  • Verify which applications Drata can automatically pull from Microsoft 365. For more details on these applications, refer to the Azure Application Gallery in your Azure instance.

  • Microsoft Entra provides user attribute data based on how SSO apps are configured in Azure; this data may not be available for all applications.

  • If your IT team has chosen to provision access outside of Microsoft 365 (most likely directly in the source application), you can manually upload user data.

  • Drata’s user access review functionality also supports Microsoft 365 GCC High.

Did this answer your question?