Microsoft Copilot
Glossary
Access review
An access review is a recurring check in which the people accountable for a resource confirm who should keep access to it and remove access that is no longer needed.
Also known as: access recertification, permission review
What a review looks like
A review is created for a scope, such as a Team, a SharePoint site or a group, and assigned to a reviewer, usually the owner. The reviewer sees members, guests and sharing links, keeps what is needed and removes the rest within a review period. The result is recorded, so the decision can be shown later.
Why reviews have to recur
Access drifts. People change roles, guests finish projects and links stay valid long after they were useful. A single cleanup is out of date within months. Recurring reviews, quarterly for sensitive content and at least yearly elsewhere, keep access close to least privilege and give auditors evidence that it is being checked.
Reviews work best when the person deciding knows the content. That is usually the workspace owner.
Where Rencore fits
Rencore runs access reviews across Teams, SharePoint sites, Microsoft 365 groups and Viva Engage communities, on a schedule or on demand. Owners decide in the review, the changes are applied for them, and every decision is recorded in the audit log.
