Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDEasy
A global manufacturing company uses Microsoft Entra ID for identity management. The company has several highly privileged roles, such as Global Administrator and Exchange Administrator. They want to implement a solution that ensures these roles are assigned with just-in-time (JIT) access and are automatically revoked after a set period, requiring re-activation for future use. Which Microsoft Entra ID governance feature should you implement?
- AConditional Access Policies
- BMicrosoft Entra Privileged Identity Management (PIM)
- CMicrosoft Entra Entitlement Management
- DMicrosoft Entra Access Reviews
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Privileged Identity Management (PIM)
Microsoft Entra Privileged Identity Management (PIM) is specifically designed to manage, control, and monitor access to important resources. It provides just-in-time (JIT) access and time-bound assignments for privileged roles, which directly addresses the company's requirements.
Why the other options are wrong
- A. Conditional Access Policies enforce access controls based on conditions but do not provide JIT activation or automatic role revocation.
- C. Entitlement Management focuses on managing access to groups, applications, and SharePoint sites for lifecycle management, not specifically JIT for privileged roles.
- D. Access Reviews are for periodically reviewing existing access, not for JIT or time-bound activation.
Microsoft Entra Privileged Identity Management (PIM)
A service within Microsoft Entra ID that enables you to manage, control, and monitor access to important resources in your organization. This includes Microsoft Entra ID, Azure, and other Microsoft Online Services.
- Provides just-in-time (JIT) privileged access.
- Enforces time-bound access for roles.
- Requires approval workflows for activation.
- Offers audit trails and access reviews for privileged roles.
Memory trick: PIM protects Privileged roles with Just-In-Time access.