Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A company wants to streamline the process of onboarding new employees and granting them access to necessary resources based on their department and job function. They also need to ensure that access is automatically removed when an employee leaves the company. Which Microsoft Entra governance capability would best address these requirements?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Terms of Use
- CMicrosoft Entra Privileged Identity Management
- DMicrosoft Entra Entitlement Management
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Entitlement Management
Microsoft Entra Entitlement Management enables organizations to manage identity and access lifecycle at scale, by automating access requests, approvals, provisioning, and de-provisioning based on policies and access packages.
Why the other options are wrong
- A. Access Reviews focus on periodic verification of existing access, not automated provisioning/de-provisioning.
- B. Terms of Use ensures users accept policies, but doesn't automate access provisioning.
- C. PIM manages privileged roles, not the broader access lifecycle for all users.
Microsoft Entra Entitlement Management
A governance feature in Microsoft Entra ID that enables organizations to manage identity and access lifecycle at scale, by automating access requests, approvals, provisioning, and de-provisioning based on policies.
- Uses 'access packages' to group resources and policies.
- Automates access provisioning for joining, moving, and leaving users.
- Delegates access management to business users.
- Supports both internal and external users (B2B).
Memory trick: Entra governs access like a well-oiled machine, from start to end, and all in between.