Microsoft 365 Certified: Administrator ExpertDeploy and manage a Microsoft 365 tenantMedium
A Microsoft 365 administrator is setting up a new tenant for a company that frequently collaborates with external partners. The company wants to allow external users to access specific SharePoint Online sites and Microsoft Teams channels, but they need to ensure that these external users are only granted access for a limited time and must re-request access after expiration. Which Azure AD feature should the administrator configure to manage this requirement?
- AAzure AD Dynamic Groups
- BAzure AD Entitlement Management
- CAzure AD Privileged Identity Management (PIM)
- DAzure AD External Identities (B2B collaboration)
Show answer & explanationAnswer & explanation
Correct answer: B. Azure AD Entitlement Management
Azure AD Entitlement Management allows organizations to manage identity and access lifecycle at scale, including creating access packages that bundle resources and include settings for access expiration and recurring access reviews for external users. This directly addresses the requirement for time-limited access and re-requesting access.
Why the other options are wrong
- A. Dynamic Groups automatically update membership based on attributes, but don't manage access expiration or re-request for external users.
- C. PIM manages time-bound, 'just-in-time' access for privileged roles, not general access to resources for external collaborators.
- D. External Identities (B2B) allows external users to collaborate, but Entitlement Management provides the advanced lifecycle management, expiration, and re-request features.
Azure AD Entitlement Management
An identity governance feature in Azure AD that enables organizations to manage identity and access lifecycle at scale by automating access requests, approvals, access reviews, and expiration.
- Automates access to groups, applications, and SharePoint sites.
- Supports both internal and external users (B2B collaboration).
- Allows defining access packages with expiration dates and periodic access reviews.
Memory trick: Entitlement Management is like a self-expiring guest pass system for your digital resources.