Obtain Access Review ID for Access Reviews created under Access Package via the GRAPH API?

Question

Hi, there is an API call for obtaining Access Review results via the GRAPH API (beta). However, it requires the reviewId to be known. There is an API for listing all the Access Reviews which in turn requires the business template Id to be known. There is an API call to list all the business template Ids. However, the problem is that the API call only lists Access Reviews created under the main Access Reviews section of the portal, not the ones created underneath Access Packages.

Does anyone know, therefore, how to list Access Review results for Access Review that are created underneath Access Packages?

Many thanks
Mark

Answer 1

@Mark T
Thank you for your time and patience throughout this issue. I received an update from our engineering team and will post their response below.

Update:
As of right now, here's a full list of properties available via Graph API for Access Packages:
https://learn.microsoft.com/en-us/graph/api/resources/assignmentreviewsettings?view=graph-rest-beta

Coming soon:
"We're soon going to expose the creation of access reviews on access packages within the access reviews experience, with all the options that you have for groups and apps. A private preview of this feature will go live in the next few months, and will likely give this customer all they're looking for."

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

Answer 2

@Mark T
Thank you for your detailed post!

Since these Access Packages are under Entitlement Management within the Azure Portal, you'll have to reference that category when looking for the GraphAPI commands under Governance.

Here's a full list of the GraphAPI commands for Access Packages under Entitlement Management.

GET https://graph.microsoft.com/beta/identityGovernance/entitlementManagement/accessPackages/{id}  

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 3

@Mark T
I reached out to our PM/Dev team who works with the Access Package API and will post their update below.

Update:
Currently, there isn’t any navigation property to get reviews associated with an access package. That could be a new feature we could support.

Since this issue currently isn't supported, I'd recommend creating a feature request using our User Voice forum. This way our engineering teams can look into supporting this feature.

I'm also still waiting to hear back on potential steps to join the private preview.
Thank you for your time and patience throughout this issue.

Answer 4

Hi James, I assume that by "navigation property to get reviews associated with an access package" they mean via the Portal? As in exposing the reviews associated with a package but in the main Access reviews section? If so, yes, that's a nice idea as it pulls together all the Access review results into one place. I'm happy to add to the User Voice. I think for now, the main thing is that exposing the access reviews within the package via the API is going to fix the immediate problem. (Indeed, I would have though it was a pre-requisite to doing it in the portal anyway?)

Re the private preview: many thanks for continuing with this.

All the best
Mark

Answer 5

Hi James,
Thank very much indeed for following this up. What I'll do is keep an eye on this thread for any updates and reach out to you when we're in Q2. (I assume this is calendar quarters, as in April onwards?)
Many thanks
Mark