Employees often retain access to data and resources they shouldn't as they change roles. Azure AD access reviews enable management of group memberships, access to enterprise applications and role assignments. Access can be reviewed regularly to make sure employees and guests only have access to the services and resources they need. Reviews can also be delegated the resource owners rather than IT. Privileged Azure AD roles can also be a target for access reviews to reduce the number of administrators.