rencore.com (opens in a new tab) Start a trial (opens in a new tab)

Create an access review report

Last updated Deprecated Reviews Access & Sharing

AI summary

Create an access review to audit user access to Microsoft 365 objects like SharePoint sites and Flows through the Access Review Builder. The three-step process involves choosing a trigger (manual or scheduled), selecting reviewers and setting deadlines, and adding details such as name and description. Access is deprecated and will be shut down on December 31, 2026; migrate to Reviews before then.

Access is deprecated and will be shut down on . It has been replaced by Reviews. Migrate your access review processes to Reviews before then.

Add an Access Review Report to your governance from the Access Review Template Library. The Access Review Builder takes you through three screens: the trigger, the review settings and the details.

Before you begin

  • Your Rencore role needs the Create Access Review permission. The Admin, Contributor and Owner roles have it. See Rencore roles.
  • All changes made by users during the Access Review are replicated to the Microsoft 365 environment during the night after the Access Review has been finished.

Steps

  1. Click on Access on the Nav Panel.

  2. Click on Add Access Review. This takes you to the Access Review Template Library. To narrow down the list of templates, filter by Service and Category.

    Access Review Template Library with templates for groups, Teams, site collections and agents
  3. Choose the template that you want to use. This loads the Access Review Builder screen.

  4. On the trigger screen, select the type of trigger the Review will use: Manually or On Schedule. Manually lets you refresh the access review directly in the object, as a one-time review. On Schedule checks the data periodically, as a recurring review of objects.

    Choosing either of these options will start the Access Review based on the "Reviewed Object" logic. The difference is whether the review is refreshed manually or on schedule.
  5. Select the object to be reviewed from the drop-down list.

  6. Once happy with the selection and filters, click Next in the top right of the screen.

    Access Review Builder trigger screen with Next in the top right
  7. On the access review settings screen, choose who reviews the access. The object you selected sets the default (i.e. if you select SharePoint Site Collection, the Owners are selected, and if you select Flows, the owners of the Flows are selected). To choose other reviewers, select Specified users must review and approve permissions and enter the users in the new box.

    Enabling "Perform Access Review" requires approval of all permissions found. Disabling this option skips reviewer approval and email notifications.
  8. Under Due date to perform the access review, select how many days the reviewers have after being notified, between 2 and 60 days.

  9. To make reviewers add a comment, check Require a comment on approval.

  10. Under Email communication, select how many days before the review deadline a reminder is sent, between 1 and 14 days. This option can be toggled on or off.

  11. Click Next in the top right of the screen.

    Access Review Builder settings screen with Next in the top right
  12. On the details screen, enter a unique name in the Title field (e.g. Access Review for SharePoint Site Collections). A green tick appears when the title is unique.

  13. In the Description field, enter a description (e.g. This is an Access Review for SharePoint Site Collections).

  14. Select the desired Category from the drop-down.

  15. Select the Icon from the drop-down. This is usually the connector the object belongs to.

  16. Click Save in the top right corner.

    Access Review Builder, Details step, with title, description, category, icon and Save

What you see

After you click Save, the Access Review gathers data.

Frequently asked questions

Which Rencore role permission do I need to create an access review report?

You need the Create Access Review permission. The Admin, Contributor and Owner roles have it.

What is the difference between a manual and a scheduled access review trigger?

Manually runs a one-time review that you refresh directly in the object. On Schedule checks the data periodically, as a recurring review of objects. Both options start the review based on the Reviewed Object logic.

How many days can I give reviewers to complete an access review?

You can set the due date between 2 and 60 days after reviewers are notified. You can also send a reminder between 1 and 14 days before the deadline, and this option can be toggled on or off.

When are changes made during an access review applied to Microsoft 365?

Changes made by users during the Access Review are replicated to the Microsoft 365 environment during the night after the Access Review has been finished.

Is access still supported for access reviews?

No. Access is deprecated and will be shut down on 31 December 2026. Reviews replaces it, so you should migrate your access review processes to Reviews before then.