Microsoft Certified: Identity and Access Administrator AssociateImplement access governanceMedium
A healthcare provider uses Microsoft Entra ID and has just completed a major acquisition. They need to integrate the new company's users into their existing access governance framework using entitlement management. The acquired company uses its own separate Microsoft Entra tenant, and its users frequently need access to applications managed by the parent company's entitlement packages. The parent company wants to streamline the process of allowing these external users to request access without manually inviting each user and without requiring the acquired company to switch to the parent company's tenant. Which entitlement management feature should be configured to enable this seamless collaboration?
- AImplement a custom B2B direct connect setup.
- BConfigure a connected organization for the acquired company's tenant.
- CUse guest user invitations for all users from the acquired company.
- DCreate a new access package for each external user.
Show answer & explanationAnswer & explanation
Correct answer: B. Configure a connected organization for the acquired company's tenant.
A connected organization in entitlement management allows users from a partner's Microsoft Entra tenant to request access to your access packages without being manually invited as guests. This streamlines collaboration with external partners.
Why the other options are wrong
- A. B2B direct connect is for shared channels in Teams, not for entitlement management access requests across tenants.
- C. Using guest user invitations is a manual process and does not allow self-service requests from the external tenant without prior invitation.
- D. Creating a new access package for each user is not scalable and doesn't address the external user request scenario.
Entitlement Management Connected Organization
A configuration in Microsoft Entra entitlement management that allows users from a partner's Microsoft Entra tenant or a social identity provider to self-service request access to access packages.
- Facilitates B2B collaboration without manual guest invitations.
- Allows external users to request access through your organization's My Access portal.
- Can be configured for specific external Microsoft Entra tenants or social providers.
Memory trick: Connect organizations, open the access gates for partners.