Microsoft Certified: Identity and Access Administrator AssociateImplement access governanceHard
A research institution uses Microsoft Entra ID and has implemented entitlement management. They have a highly sensitive research project that requires access to be granted based on a user's department and job title, and only if they are a full-time employee. Access requests should be automatically approved if these conditions are met, otherwise, they should go through an approval process. Which type of policy configuration should be used to enforce these granular conditions for automatic approval?
- ARequestor conditions policy
- BAssignment policy
- CLifecycle policy
- DApproval policy
Show answer & explanationAnswer & explanation
Correct answer: A. Requestor conditions policy
Requestor conditions policies allow you to define specific attributes (like department, job title, and employee type) that a requestor must meet for their access request to be automatically approved or routed to a specific approval flow, directly fulfilling the scenario's requirements.
Why the other options are wrong
- B. Assignment policies define how access is assigned, but 'Requestor conditions' enable the granular, attribute-based auto-approval logic.
- C. Lifecycle policies are for managing user accounts (e.g., joiner/leaver processes), not for attribute-based access request approval logic.
- D. Approval policies define who approves requests, but 'Requestor conditions' determine *when* an approval is needed or if it's automatic based on attributes.
Entitlement Management Requestor Conditions Policy
A policy within Entitlement Management that uses attribute-based conditions (e.g., department, job title) to determine if an access request should be automatically approved or sent for manual approval.
- Enables granular, attribute-driven access decisions.
- Can trigger automatic approval or specific approval stages.
- Enhances security and automation for access requests.
Memory trick: If the 'Requestor's Conditions' are right, access can be granted with no more fight.