Microsoft Certified: Identity and Access Administrator AssociateImplement an identity management solutionMedium
A company is implementing a new policy to ensure that all guest users invited via Azure AD B2B collaboration have their access reviewed every 90 days. They want to automate this process to ensure compliance and reduce manual overhead. Which Azure AD feature should they use to achieve this?
- AAzure AD Privileged Identity Management (PIM)
- BAzure AD Access Reviews
- CAzure AD Conditional Access
- DAzure AD Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: B. Azure AD Access Reviews
Azure AD Access Reviews are designed to automate the process of reviewing user access to resources, including guest users and group memberships, and can be configured to recur at specified intervals (like every 90 days).
Why the other options are wrong
- A. Azure AD PIM manages just-in-time access for privileged roles, not general access reviews for guest users.
- C. Azure AD Conditional Access enforces policies at sign-in time but does not automate periodic access reviews.
- D. Azure AD Identity Protection focuses on detecting and remediating identity-based risks, not on periodic access certification.
Azure AD Access Reviews
A feature in Azure AD that enables organizations to efficiently manage group memberships, access to enterprise applications, and role assignments by automating periodic reviews.
- Automates review process for users, groups, and applications.
- Supports guest users and internal users.
- Can be configured for recurring reviews at specified intervals.
Memory trick: Access Reviews are like 'regular check-ups' for permissions.