A company uses Microsoft Entra ID and wants to automate the process of granting access to internal applications and Microsoft 365 groups. Employees request access through a portal, and managers must approve the requests. The access should be automatically removed after a defined period, and managers must perform quarterly access reviews to confirm continued need. Which Microsoft Entra ID feature should they use?

Microsoft Entra ID Privileged Identity Management (PIM)

PIM is used for just-in-time activation of privileged roles (e.g., Global Administrator). It does not manage access to general applications or Microsoft 365 groups.

Microsoft Entra ID Conditional Access

Conditional Access controls access based on conditions like location, device, and risk. It does not automate access requests, approvals, or reviews.

Microsoft Entra ID Self-Service Group Management

Self-service group management allows users to create groups and manage membership, but it does not support predefined approval workflows, expiration, or periodic access reviews.

What does this AZ-305 question test?

Authentication checks who the user is.

What is the correct answer to this question?

The correct answer is: Microsoft Entra ID Entitlement Management — Microsoft Entra ID Entitlement Management provides automated access request workflows, approval processes, time-bound access, and access reviews. It is part of Microsoft Entra ID Identity Governance. Access reviews can be configured to be recurring. Microsoft Entra ID Privileged Identity Management (PIM) is for privileged roles, not for general application access. Conditional Access is for enforcing policies during sign-in, not for managing access lifecycle. Self-service group management allows users to create groups but does not include approval workflows or expiration.

What should I do if I get this AZ-305 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.