Access reviews require an Azure AD Premium P2 license. Access reviews for Group1 and App1 can be configured in Azure AD Access Reviews. Access reviews for the Contributor role and Role1 would need to be configured in Privileged Identity Management (PIM). PIM is included in Azure AD Premium P2. Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-start- security-review?toc=/azure/active-directory/governance/toc.json https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview