Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Use catalog access reviews to review a user’s access across multiple supported resource types in one Microsoft Entra review experience. First add the resources to an entitlement management catalog, then create a catalog access review. Supported resources include groups, applications, and custom data provider resources.
What a catalog access review covers
A catalog access review brings together users’ access to supported resources within an entitlement management catalog. Microsoft describes the feature as a way to review multiple resource types, such as groups, applications, and custom disconnected resources, at once. The resources must be in a catalog before they can be included.
| Resource type | What reviewers assess |
|---|---|
| Groups and Teams | Group membership |
| Applications | App role assignments |
| Custom data provider resources | Access represented by resource data supplied through the organization’s custom data provider |
See Microsoft’s Catalog Access Reviews documentation for supported resources and setup details.
How catalog reviews differ from ordinary group and app reviews
Choosing several groups or applications in the standard group-and-application review workflow does not combine them into one review. Microsoft creates a separate review for each selected resource. For example, selecting five groups results in five reviews. Catalog access reviews are the documented option when the goal is one review experience spanning multiple supported resource types.
#1 Best Overall
- Supports FIDO2 biometric authentication services and FIDO U2F services requiring security key functionality. Secure and flexible authentication across multiple platforms.
- Exceptional biometric performance, 360° readability, and advanced anti-spoofing technology.
- Designed for portability, it comes with a cover to protect the security key when not in use.
- Aligns with cybersecurity measures that comply with key privacy laws and regulations, including GDPR, BIPA, and CCPA. Approved for use in U.S. federal government institutions.
- Passkey compatibility with Microsoft, Google, and Apple for a convenient and secure sign-in experience. Certified for Microsoft Entra ID for secure multifactor integration with Microsoft services.
Access reviews are also not the workflow for every kind of access. Microsoft directs reviews of group membership and connected application assignments to access reviews, Entra and Azure resource roles to Privileged Identity Management, and access package assignments to entitlement management. For the overview, see What are access reviews?
Prepare the catalog and review plan
Before creating the review, decide what access should be examined and how reviewers will make and act on decisions. Microsoft’s deployment guidance recommends planning these choices rather than assuming a universal default:
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Which resources and whose access to review.
- How often reviews should run and who should review them.
- Reviewer communications and decision timelines.
- Whether decisions or reviewer nonresponse trigger automatic actions.
- What manual follow-up is needed and how resulting actions will be communicated.
For a broader planning checklist, see Plan a Microsoft Entra access reviews deployment.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Create a catalog access review
- In the Microsoft Entra admin center, go to ID Governance > Access Reviews and select New access review.
- Select the template for reviewing users’ access across multiple resource types within a catalog.
- Select the catalog containing the resources to review.
- Choose the reviewers and configure the review schedule.
- Configure optional reviewer experience and completion settings. If needed, use a multi-stage review; resource owners can be secondary reviewers.
- Create the review.
Microsoft’s Create an access review of groups and applications article covers the separate standard workflow and its review options. Catalog reviews can also be created programmatically with Microsoft Graph; consult current API documentation for the applicable permissions and parameters.
Rank #3
- Supports FIDO2 biometric authentication services and FIDO U2F services requiring security key functionality. Secure and flexible authentication across multiple platforms.
- Exceptional biometric performance, 360° readability, and advanced anti-spoofing technology.
- Designed for portability, it comes with a cover to protect the security key when not in use.
- Aligns with cybersecurity measures that comply with key privacy laws and regulations, including GDPR, BIPA, and CCPA. Approved for use in U.S. federal government institutions.
- Passkey compatibility with Microsoft, Google, and Apple for a convenient and secure sign-in experience. Certified for Microsoft Entra ID for secure multifactor integration with Microsoft services.
Check licensing and timing before rollout
Microsoft’s catalog review documentation specifies a Microsoft Entra ID Governance or Microsoft Entra Suite subscription requirement. The access reviews overview notes that licensing varies by capability and identifies Governance for reviewing multiple resources together. Confirm that the tenant is eligible for this exact capability before planning deployment.
Changes made within 12 hours before a catalog review starts—for example, adding users or resources—may not appear in that review. If a complete starting snapshot matters, make catalog changes sufficiently ahead of the scheduled start and verify the review’s scope.
Rank #4
- FIDO2 + FIDO U2F certified security key, supports PIV credential authentication
- Sits with a low-profile when plugged-in
- Works in every browser without installing any drivers
- Supports desktops, laptops, tablets, and Android mobile devices via USB-C
- Helps protect your accounts from phishing and other cyber-attacks. Prevents your devices from unauthorized use.
For broader prerequisites and lifecycle context, see Manage user access with Microsoft Entra access reviews.
Quick Recap
Best Value
- FIDO2 + FIDO U2F certified and supported USB security key
- Supports Computers, Laptops, Tablets, and Mobile Devices with a USB-C port and/or NFC
- Works without downloading any drivers. Supported OS: Android, Chrome OS, Windows, MacOS, Linux
- Durable design made to last for a long time with everyday use. Water-resistant (IP67)
- Helps protect your accounts from phishing and other cyber-attacks. Prevents your devices from unauthorized use.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
