Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium

A finance department requires a solution to ensure that all administrative roles within Microsoft Entra ID are assigned just-in-time and with approval workflows. Which Microsoft Entra governance capability addresses this requirement?

  1. AMicrosoft Entra Access Reviews
  2. BMicrosoft Entra Identity Protection
  3. CMicrosoft Entra Conditional Access
  4. DMicrosoft Entra Privileged Identity Management (PIM)
Show answer & explanation

Correct answer: D. Microsoft Entra Privileged Identity Management (PIM)

Microsoft Entra Privileged Identity Management (PIM) is specifically designed to manage, control, and monitor access to important resources, including just-in-time access and approval workflows for administrative roles.

Why the other options are wrong

  • A. Access Reviews ensure that users still require the access they have been granted, but it's not for just-in-time activation.
  • B. Identity Protection focuses on risk detection and remediation.
  • C. Conditional Access enforces policies based on conditions, but doesn't manage just-in-time role elevation.

Microsoft Entra PIM

A service in Microsoft Entra ID that enables you to manage, control, and monitor access to important resources in Microsoft Entra ID, Azure, and other Microsoft Online Services.

  • Provides just-in-time (JIT) privileged access.
  • Enforces approval workflows for role activation.
  • Offers role activation notifications and audit history.

Memory trick: PIM protects the crown, ensuring only the right people wear it, and only when needed.

More Describe the capabilities of Microsoft Entra questions