Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A financial institution requires a solution to ensure that all administrative roles within Microsoft Entra ID and connected Azure resources are assigned on a just-in-time (JIT) basis and that their usage is audited. This is to minimize standing access permissions and adhere to strict compliance regulations. Which Microsoft Entra governance capability is best suited for this requirement?
- AMicrosoft Entra Terms of Use
- BMicrosoft Entra Entitlement Management
- CMicrosoft Entra Access Reviews
- DMicrosoft Entra Privileged Identity Management (PIM)
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Privileged Identity Management (PIM)
Microsoft Entra Privileged Identity Management (PIM) enables just-in-time access for privileged roles, requiring activation and providing auditing capabilities to reduce exposure to standing administrative privileges.
Why the other options are wrong
- A. Terms of Use ensures users accept policies before gaining access.
- B. Entitlement Management streamlines access requests and approval workflows for groups and applications.
- C. Access Reviews help manage access lifecycle by periodically reviewing who has access to what.
Microsoft Entra PIM
A service that manages, controls, and monitors access to important resources in Microsoft Entra ID, Azure, and other Microsoft Online Services.
- Provides just-in-time (JIT) access to minimize standing permissions
- Enforces time-bound access for privileged roles
- Offers approval workflows and comprehensive auditing for privilege elevation
Memory trick: PIM manages your privileged roles, just-in-time.