Access Inventory
The Access Inventory gives you a complete overview of all managed users and their Microsoft Entra group memberships. Use it to audit who has access to what across your organization, without digging through Entra directly.
When to Use Access Inventory
- Preparing for an access review or compliance audit
- Investigating which groups a specific user belongs to
- Verifying that new employees have been assigned the correct groups
- Exporting a snapshot of user-to-group mappings for external reporting
Navigating the Inventory
The main table displays one row per managed user with the following columns:
| Column | Description |
|---|---|
| Display Name | The user's full name from Entra |
| Primary email address | |
| Department | Organizational department |
| Job Title | Current job title |
| Status | Account status (enabled/disabled) |
| Groups | Number of Entra groups the user belongs to |
Viewing Group Memberships
Click on any user row to expand it and see the full list of Entra groups that user belongs to. This makes it easy to spot unexpected memberships or confirm that a user has the right set of groups.
Searching and Filtering
Use the search bar to quickly locate users by name, email, department, or job title. Filters help you narrow down the list when working with large user populations.
Exporting Data
Click the Export CSV button to download the current view as a CSV file. The export respects any active search or filter criteria, so you can export a targeted subset of users rather than the entire inventory.
Best Practices
- Run periodic access reviews by exporting the inventory and comparing it against your expected group assignments.
- Use the search and filter tools to focus on specific departments or teams during audits.
- Check the Groups count column for outliers — users with unusually high or low group counts may warrant investigation.
- Combine Access Inventory with the Hygiene Center to identify users in groups that may no longer be needed.
Troubleshooting
If a user is missing from the inventory:
- Confirm the user is part of the managed users scope (see Settings > Managed Users)
- Trigger a manual sync if the user was recently added
If group counts seem incorrect:
- Group membership data syncs from Entra on a regular schedule
- Use the refresh option to pull the latest data
If the CSV export is empty or incomplete:
- Check that your search or filter criteria aren't too restrictive
- Clear all filters and try the export again