Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A company wants to manage the lifecycle of user access to groups, applications, and SharePoint sites, including automated assignments, approvals, and expiration. They also want to delegate access management decisions to resource owners. Which Microsoft Entra capability should they use?
- AMicrosoft Entra Entitlement Management
- BMicrosoft Entra Access Reviews
- CMicrosoft Entra Identity Protection
- DMicrosoft Entra Privileged Identity Management (PIM)
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Entitlement Management
Microsoft Entra Entitlement Management allows organizations to manage identity and access lifecycle at scale, including automated access assignments, approvals, expiration, and delegation to resource owners.
Why the other options are wrong
- B. Access Reviews are for periodic verification of existing access, not for initial provisioning or automated lifecycle management.
- C. Identity Protection focuses on detecting and remediating identity risks, not access lifecycle management.
- D. PIM manages privileged roles with just-in-time access, not the broader lifecycle of user access to general resources.
Microsoft Entra Entitlement Management
An identity governance feature that enables organizations to manage identity and access lifecycle at scale, by automating access requests, approvals, provisioning, and deprovisioning access.
- Automates access lifecycle (request, approval, expiration).
- Delegates access decisions to resource owners.
- Manages access to groups, applications, and SharePoint sites.
Memory trick: Entitlement Management: 'E' for 'Easy' access lifecycle.