Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A company is concerned about the security of administrative roles within Microsoft Entra ID. They want to ensure that privileged roles are assigned only when needed, for a limited time, and require approval workflows. After the assigned time, the permissions should automatically revert. Which Microsoft Entra capability addresses these requirements?
- AMicrosoft Entra Privileged Identity Management (PIM)
- BMicrosoft Entra Access Reviews
- CMicrosoft Entra Entitlement Management
- DMicrosoft Entra Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Privileged Identity Management (PIM)
Microsoft Entra Privileged Identity Management (PIM) is specifically designed to manage, control, and monitor access to important resources. It enables just-in-time access, time-bound assignments, approval workflows, and provides auditing capabilities for privileged roles, directly meeting all stated requirements.
Why the other options are wrong
- B. Access Reviews verify existing access periodically, but don't manage just-in-time or time-bound assignments for privileged roles.
- C. Entitlement Management manages access lifecycle for general users and resources, not specifically for just-in-time privileged role activation.
- D. Identity Protection detects and remediates identity-based risks, not for managing privileged role assignments.
Microsoft Entra Privileged Identity Management (PIM)
A Microsoft Entra feature that helps manage, control, and monitor access to important resources within Microsoft Entra ID, Azure, and other Microsoft Online Services, by providing just-in-time and time-bound access.
- Enables 'just-in-time' (JIT) access for privileged roles.
- Provides time-bound access assignments.
- Incorporates approval workflows for role activation.
- Offers auditing and reporting on privileged access.
Memory trick: PIM: Princes only get the crown when needed, for a short reign.