Microsoft Certified: Identity and Access Administrator AssociateImplement access governanceEasy
A global conglomerate uses Microsoft Entra ID and has several business units, some of which manage their own external users in their own Microsoft Entra tenants. The conglomerate wants to allow users from these specific external business unit tenants to request access to internal applications managed by entitlement management, without having to invite each user individually. Which entitlement management feature should be configured?
- AConnected organizations
- BAccess package catalogs
- CResource roles
- DSeparation of duties
Show answer & explanationAnswer & explanation
Correct answer: A. Connected organizations
Connected organizations allow you to establish a relationship with another Microsoft Entra tenant, enabling users from that tenant to request access to resources in your tenant via entitlement management.
Why the other options are wrong
- B. Access package catalogs are containers for access packages, not for defining external user relationships.
- C. Resource roles define permissions within a resource, not how external users gain access.
- D. Separation of duties is a concept to prevent conflicts of interest, not a feature for external user access.
Microsoft Entra Connected Organizations
A feature in Microsoft Entra entitlement management that allows you to establish trust with external Microsoft Entra tenants or social identities, enabling users from those organizations to request access to your resources.
- Facilitates B2B collaboration without individual invitations.
- Users from connected organizations can request access to access packages.
- Can be configured for specific Entra ID tenants or social identity providers.
Memory trick: Connect with others to share access securely.