Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A security administrator needs to configure Microsoft Entra ID to automatically revoke access for users who have been inactive for a specified period and require re-approval to regain access. Which Microsoft Entra governance capability can achieve this?
- AMicrosoft Entra Entitlement Management
- BMicrosoft Entra Access Reviews
- CMicrosoft Entra Privileged Identity Management (PIM)
- DMicrosoft Entra Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Access Reviews
Microsoft Entra Access Reviews allow organizations to periodically review user access to resources. They can be configured to automatically revoke access for inactive users, fulfilling the requirement for revoking access based on inactivity and requiring re-approval.
Why the other options are wrong
- A. Entitlement Management focuses on managing access lifecycles for groups and applications, but Access Reviews specifically handle periodic review and automated revocation for inactivity.
- C. PIM manages just-in-time access for privileged roles, not general user access revocation based on inactivity.
- D. Identity Protection focuses on risk detection and remediation, not automated access revocation based on inactivity.
Microsoft Entra Access Reviews
A governance capability in Microsoft Entra ID that enables organizations to efficiently manage group memberships, access to enterprise applications, and role assignments.
- Automates periodic access reviews.
- Can identify and revoke access for inactive users.
- Helps achieve compliance and reduce access sprawl.
Memory trick: Access Reviews are like a librarian checking out forgotten books.