Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A finance department requires a solution to ensure that all administrative roles within Microsoft Entra ID are assigned just-in-time and with approval workflows. Which Microsoft Entra governance capability addresses this requirement?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Identity Protection
- CMicrosoft Entra Conditional Access
- DMicrosoft Entra Privileged Identity Management (PIM)
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Privileged Identity Management (PIM)
Microsoft Entra Privileged Identity Management (PIM) is specifically designed to manage, control, and monitor access to important resources, including just-in-time access and approval workflows for administrative roles.
Why the other options are wrong
- A. Access Reviews ensure that users still require the access they have been granted, but it's not for just-in-time activation.
- B. Identity Protection focuses on risk detection and remediation.
- C. Conditional Access enforces policies based on conditions, but doesn't manage just-in-time role elevation.
Microsoft Entra PIM
A service in Microsoft Entra ID that enables you to manage, control, and monitor access to important resources in Microsoft Entra ID, Azure, and other Microsoft Online Services.
- Provides just-in-time (JIT) privileged access.
- Enforces approval workflows for role activation.
- Offers role activation notifications and audit history.
Memory trick: PIM protects the crown, ensuring only the right people wear it, and only when needed.