Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard

A company is concerned about the security of administrative roles within Microsoft Entra ID. They want to ensure that privileged roles are assigned only when needed, for a limited time, and require approval workflows. After the assigned time, the permissions should automatically revert. Which Microsoft Entra capability addresses these requirements?

  1. AMicrosoft Entra Privileged Identity Management (PIM)
  2. BMicrosoft Entra Access Reviews
  3. CMicrosoft Entra Entitlement Management
  4. DMicrosoft Entra Identity Protection
Show answer & explanation

Correct answer: A. Microsoft Entra Privileged Identity Management (PIM)

Microsoft Entra Privileged Identity Management (PIM) is specifically designed to manage, control, and monitor access to important resources. It enables just-in-time access, time-bound assignments, approval workflows, and provides auditing capabilities for privileged roles, directly meeting all stated requirements.

Why the other options are wrong

  • B. Access Reviews verify existing access periodically, but don't manage just-in-time or time-bound assignments for privileged roles.
  • C. Entitlement Management manages access lifecycle for general users and resources, not specifically for just-in-time privileged role activation.
  • D. Identity Protection detects and remediates identity-based risks, not for managing privileged role assignments.

Microsoft Entra Privileged Identity Management (PIM)

A Microsoft Entra feature that helps manage, control, and monitor access to important resources within Microsoft Entra ID, Azure, and other Microsoft Online Services, by providing just-in-time and time-bound access.

  • Enables 'just-in-time' (JIT) access for privileged roles.
  • Provides time-bound access assignments.
  • Incorporates approval workflows for role activation.
  • Offers auditing and reporting on privileged access.

Memory trick: PIM: Princes only get the crown when needed, for a short reign.

More Describe the capabilities of Microsoft Entra questions