Microsoft Certified: Identity and Access Administrator AssociateImplement access governanceEasy
A company uses Microsoft Entra ID to manage its identities. They have a critical group called 'Global Admins' that includes several highly privileged accounts. The security team wants to ensure that these accounts are only used when absolutely necessary and that their usage is audited. They need a solution that can automatically remove permanent administrator assignments and require users to activate their roles with multi-factor authentication (MFA) before use. Which Microsoft Entra ID feature should the company implement to achieve this goal?
- AMicrosoft Entra Conditional Access policies
- BMicrosoft Entra Privileged Identity Management (PIM)
- CMicrosoft Entra Identity Protection
- DMicrosoft Entra access reviews
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Privileged Identity Management (PIM)
Privileged Identity Management (PIM) allows organizations to manage, control, and monitor access to important resources, providing just-in-time and just-enough access for privileged roles, with activation requirements like MFA.
Why the other options are wrong
- A. Conditional Access policies enforce access controls based on conditions, but don't manage just-in-time role activation or permanent assignment removal.
- C. Identity Protection detects and remediates identity risks, not for managing privileged role assignments.
- D. Access reviews periodically check who has access to resources and whether that access is still needed, but don't handle just-in-time activation or permanent assignment removal.
Privileged Identity Management (PIM)
A Microsoft Entra ID service that enables you to manage, control, and monitor access to important resources in your organization by providing just-in-time and just-enough access.
- Provides just-in-time (JIT) access for privileged roles.
- Enforces MFA for role activation.
- Audits privileged role usage and provides access reviews for privileged roles.
Memory trick: PIM is the vigilant guardian for your crown jewels of access.