Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDEasy
A global manufacturing company uses Microsoft Entra ID for identity management. The company has a strict policy that administrators should only have elevated permissions for a limited time when performing specific tasks. They also need to ensure that all administrative actions are auditable. Which Microsoft Entra ID governance feature should be implemented to meet these requirements?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Privileged Identity Management (PIM)
- CMicrosoft Entra Conditional Access
- DMicrosoft Entra ID Protection
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Privileged Identity Management (PIM)
Microsoft Entra Privileged Identity Management (PIM) allows organizations to manage, control, and monitor access to important resources. This includes providing just-in-time (JIT) privileged access, time-bound access, and requiring approval for role activation, all while providing comprehensive auditing capabilities.
Why the other options are wrong
- A. Access Reviews help manage group memberships and access to applications, but not just-in-time elevation of privileges.
- C. Conditional Access enforces policies based on conditions, but doesn't manage the lifecycle of privileged roles itself.
- D. ID Protection focuses on detecting and remediating identity-based risks, not managing privileged access.
Privileged Identity Management (PIM)
Microsoft Entra Privileged Identity Management (PIM) is a service that enables you to manage, control, and monitor access to important resources in your organization.
- Provides just-in-time (JIT) privileged access.
- Enforces time-bound access for roles and resources.
- Offers comprehensive auditing and alerts for privileged role usage.
Memory trick: PIM protects Privileged identities, Access Reviews review who has what, Identity Protection protects against risks.