Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDMedium
A company uses Microsoft Entra ID and has implemented Microsoft Entra Connect to synchronize user identities from their on-premises Active Directory. They have a group of highly privileged administrators who need temporary, just-in-time access to specific Microsoft Entra roles (e.g., Global Administrator) only when performing specific tasks. This access should be time-bound and require approval. Which Microsoft Entra ID governance feature should you implement?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Entitlement Management
- CMicrosoft Entra Privileged Identity Management (PIM)
- DMicrosoft Entra Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Entra Privileged Identity Management (PIM)
Microsoft Entra Privileged Identity Management (PIM) is designed to manage, control, and monitor access to important resources within Microsoft Entra ID, Azure, and other Microsoft Online Services. It provides just-in-time, time-bound access to roles, requiring approval and providing audit trails, which directly addresses the scenario.
Why the other options are wrong
- A. Access reviews are for regularly verifying existing access, not for granting temporary, just-in-time access.
- B. Entitlement management is for managing access to groups and applications at scale through access packages, not specifically for privileged roles with just-in-time activation.
- D. Identity Protection focuses on detecting and remediating identity-based risks, not on managing privileged access lifecycle.
Microsoft Entra Privileged Identity Management (PIM)
A service in Microsoft Entra ID that enables you to manage, control, and monitor access to important resources in your organization.
- Provides just-in-time, time-bound access to privileged roles and resources.
- Supports approval workflows for role activation.
- Offers audit logs and access reviews for privileged roles.
Memory trick: Privileged Access: Just-in-Time with PIM.