Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDMedium
A consulting company frequently collaborates with external partners. They want to streamline the process of granting and revoking access to specific SharePoint Online sites and Microsoft 365 Groups for these partners. The access should be time-limited and automatically reviewed. The company also wants to delegate the access request and approval process to business owners instead of IT. Which Microsoft Entra ID governance feature should you implement?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Privileged Identity Management (PIM)
- CMicrosoft Entra Entitlement Management
- DMicrosoft Entra B2B Collaboration
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Entra Entitlement Management
Microsoft Entra Entitlement Management is designed for managing identity and access lifecycle, including external users, to groups, applications, and SharePoint sites. It supports self-service access requests, approvals by business owners, time-limited access, and access reviews, perfectly matching the requirements.
Why the other options are wrong
- A. Access Reviews are for reviewing *existing* access, not for the full lifecycle of granting, time-limiting, and delegating access requests.
- B. PIM is for managing privileged roles, not general access to resources for external partners.
- D. B2B Collaboration is the underlying technology for inviting external users, but it doesn't provide the full governance and lifecycle management capabilities described.
Microsoft Entra Entitlement Management
A Microsoft Entra ID governance feature that enables organizations to manage identity and access lifecycle at scale, by automating access requests, approvals, access reviews, and expiration for internal and external users.
- Manages access to groups, applications, and SharePoint sites.
- Supports self-service access requests and delegated approvals.
- Automates time-limited access and access reviews.
- Ideal for managing external guest user access lifecycle.
Memory trick: Entitlement Management: Easy Access for Everyone, Managed.