Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A growing startup uses Microsoft Entra ID and has many external contractors and temporary staff who require access to specific project-related resources for a limited duration. They need a solution to streamline the onboarding and offboarding of these external users and manage their access to groups, applications, and SharePoint Online sites through self-service and approval workflows. Which Microsoft Entra governance capability is ideal for this scenario?
- AMicrosoft Entra Entitlement Management
- BMicrosoft Entra B2B Collaboration
- CMicrosoft Entra PIM for Groups
- DMicrosoft Entra Conditional Access
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Entitlement Management
Microsoft Entra Entitlement Management is designed to manage identity and access lifecycle for external users and internal employees, providing self-service access requests, approval workflows, and time-limited access to groups, applications, and SharePoint sites through 'access packages'. This exactly matches the scenario's needs for external user onboarding/offboarding and access governance.
Why the other options are wrong
- B. B2B Collaboration allows inviting external users, but Entitlement Management adds the robust access lifecycle, self-service, and approval workflows.
- C. PIM for Groups manages just-in-time elevation for *privileged* group memberships, not general access lifecycle management for external users.
- D. Conditional Access enforces policies at sign-in, but doesn't manage the access assignment lifecycle or self-service requests for external users.
Microsoft Entra Entitlement Management
A Microsoft Entra ID governance feature that enables organizations to manage identity and access lifecycle at scale by automating access requests, approvals, and provisioning.
- Uses 'access packages' to bundle resources (groups, apps, SharePoint sites)
- Supports self-service access requests with approval workflows
- Automates time-limited access and access revocation
- Ideal for managing external users (B2B guests) and project-based access
Memory trick: Entitlement Management gives guests tailor-made access packages.