Explanation:
Based on the official Microsoft SC-300 study guide and Microsoft Entra ID (Azure AD) licensing documentation, the licensing requirement for Access Reviews depends on who is being reviewed and how the review is configured .
Access reviews are an Azure AD Premium P2 feature (included in Microsoft 365 E5), and the licensing model specifies that:
"Each user who is part of an access review (either being reviewed or reviewing) must have an Azure AD Premium P2 license, except in cases where guest users are reviewed by internal reviewers - in that case, only the reviewers require a license." Let's analyze each configuration:
* Members: 500 internal + 25 guest users = 525 total members.
* Review Type: Teams + Groups
* Review Scope: All users
* Reviewers: Users review own access
Group1 Since all users (internal and guest) review their own access, every member is considered an active participant in the review. Therefore, each of the 525 members (500 internal + 25 guests) must have an Azure AD Premium P2 license.
# Group1 = 525 licenses required
* Members: 295 internal + 100 guest users = 395 total members.
* Review Type: Teams + Groups
* Review Scope: Guest users only
* Reviewers: Group owner
Group2 Here, only guest users are being reviewed, and the reviewer is the group owner (User2). Since the guest users don't require licenses when being reviewed by an internal reviewer, only the group owner (User2) needs a P2 license.
# Group2 = 1 license required
# According to Microsoft Licensing Guidance (SC-300 Official Content):
"If guest users review their own access, each guest requires a P2 license. If the review is conducted by an internal user (owner or admin), only that reviewer requires the license."