Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDMedium
A company uses Microsoft Entra ID for identity management. They need to ensure that administrative roles, such as Global Administrator, are assigned only when necessary and for a limited time. This should minimize the window of opportunity for malicious actors. Which Microsoft Entra ID feature should the company implement?
- AMicrosoft Entra Privileged Identity Management (PIM)
- BMicrosoft Entra Conditional Access
- CMicrosoft Entra Connect Health
- DMicrosoft Entra Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Privileged Identity Management (PIM)
Microsoft Entra Privileged Identity Management (PIM) is specifically designed to manage, control, and monitor access to important resources in Microsoft Entra ID. It allows for just-in-time and just-enough access, reducing the exposure time of privileged permissions.
Why the other options are wrong
- B. Microsoft Entra Conditional Access enforces policies based on conditions like user location or device state, but it doesn't manage the lifecycle of privileged role assignments.
- C. Microsoft Entra Connect Health monitors the health and activity of your on-premises identity infrastructure, not the management of privileged roles in Entra ID.
- D. Microsoft Entra Identity Protection helps detect and remediate identity-based risks, but it doesn't manage the assignment of privileged roles.
Microsoft Entra Privileged Identity Management (PIM)
A Microsoft Entra ID feature that allows you to manage, control, and monitor access to important resources in your organization, including Microsoft Entra roles, Azure resources, and other Microsoft online services.
- Provides just-in-time privileged access to reduce exposure time.
- Enforces approval workflows for role activation.
- Offers audit logs to track privileged access usage.
Memory trick: PIM: Protect Important Members with Time-limited Keys.