Microsoft Certified: Identity and Access Administrator AssociateImplement access governanceEasy
A company uses Microsoft Entra ID (formerly Azure Active Directory) and has implemented entitlement management. They need to ensure that when a user requests access to an access package, the request is automatically approved if the user's manager also approves it. The manager's approval should be the only required approval step. Which setting within the entitlement management access package policy should be configured to achieve this?
- AEnable approval
- BEnable request expiration
- CRequire new access justification
- DRequire justification
Show answer & explanationAnswer & explanation
Correct answer: A. Enable approval
To enable an approval workflow for access package requests, the 'Enable approval' setting must be turned on. This setting allows you to configure specific approval stages, including manager approval.
Why the other options are wrong
- B. This setting defines how long the access will be granted for, not the approval process itself.
- C. This is not a standard setting in entitlement management policies; 'Require justification' is the correct term for requestor justification.
- D. This setting requires the requestor to provide a reason for their request, but it does not enable an approval workflow.
Entitlement Management Approval
A feature within Microsoft Entra entitlement management that allows administrators to define approval workflows for access package requests, ensuring appropriate oversight before access is granted.
- Can include single or multi-stage approvals.
- Supports manager approval, specific users/groups, or sponsored guests.
- Requests can expire if not approved within a set timeframe.
Memory trick: Approve access, managers give the green light.