| author | jyothig123 |
|---|---|
| ms.topic | include |
Important
For delegated access using work or school accounts, the signed-in user must be assigned a supported Microsoft Entra role or a custom role that grants the permissions required for this operation. This operation supports the following built-in roles, which provide only the least privilege necessary:
-
To read access reviews of a group or app: the creator of the access review; Global Reader, Security Reader, User Administrator, Identity Governance Administrator, Security Administrator
-
To read access reviews of a Microsoft Entra role: Security Reader, Identity Governance Administrator, Privileged Role Administrator, Security Administrator