Microsoft Azure Security Technologies (AZ-500)

Who should you set Reviewers to when configuring an access review for a new collection?

1. Selected users.

2. Members (Self).

3. Group Owners.

4. Anyone.

The correct answer is: Group Owners.

When configuring an access review for a new collection, setting the reviewers to "Group Owners" is advantageous for several reasons. Group owners typically have a vested interest in managing the access and permissions of their group members. They are usually well-informed about the role and responsibilities of the users within the group, making them ideally suited to evaluate whether access continues to be appropriate. Group owners can assess whether users should retain their access based on their current role and the needs of the organization. By involving them in the review process, organizations leverage their insight to ensure compliance with security policies and maintain appropriate access controls. Moreover, group owners can help ensure that access is granted based on necessity, and they can initiate adjustments as needed. In contrast, the other options, such as selected users, members themselves, or anyone, could lead to less effective reviews. Selected users may lack comprehensive knowledge about the roles and responsibilities of all group members. Members reviewing their access may have a biased perspective and might not recognize the necessity of proper access levels in the larger context of security. Allowing anyone to review access can lead to a lack of accountability and oversight, as this group could include individuals who are not familiar with the specifics of the access requirements.