Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDMedium
A company is implementing Microsoft Entra ID governance. They want to ensure that all new users are automatically assigned to appropriate groups and have the necessary licenses based on their department. This assignment should be dynamic and update automatically if a user's department changes. Which Microsoft Entra ID governance feature should you use?
- AAccess reviews
- BTerms of use
- CEntitlement management
- DPrivileged Identity Management (PIM)
Show answer & explanationAnswer & explanation
Correct answer: C. Entitlement management
Entitlement management allows you to manage identity and access lifecycle at scale by creating access packages. These packages can automatically assign users to groups and apply licenses based on rules, including dynamic updates when user attributes (like department) change.
Why the other options are wrong
- A. Access reviews are for regularly reviewing existing access, not for initial dynamic assignment.
- B. Terms of use are for presenting legal disclaimers to users, not for dynamic access assignment.
- D. PIM is for managing just-in-time access to privileged roles, not for general user provisioning and licensing.
Microsoft Entra Entitlement Management
An identity governance feature that enables organizations to manage identity and access lifecycle at scale, automating access requests, approvals, provisioning, and de-provisioning.
- Uses 'access packages' to bundle resources (groups, applications, SharePoint sites).
- Supports automatic assignment and removal of access based on user attributes.
- Streamlines onboarding, offboarding, and internal transfers.
Memory trick: Govern Identities, Grant Entitlements, Ensure Control.