A company uses Microsoft Entra ID (Microsoft Entra ID). They need to grant temporary administrative roles to users for specific tasks. The process must require approval from a designated approver, and the access must automatically expire after a defined period. The company also needs audit logs of all role assignments and activations. Which Microsoft Entra ID feature should they implement?

Microsoft Entra ID Entitlement Management

Entitlement Management manages access packages for resources, including temporary access, but it is primarily for managing access to groups, apps, and sites, not specifically for Microsoft Entra ID administrative roles.

Microsoft Entra ID Identity Protection

Identity Protection detects risks and can trigger responses, but it is not for granting temporary administrative roles.

Microsoft Entra ID Conditional Access

Conditional Access enforces access policies but does not provide temporary role assignment or approval workflows.

What does this AZ-305 question test?

Authentication checks who the user is.

What is the correct answer to this question?

The correct answer is: Microsoft Entra ID Privileged Identity Management (PIM) — Microsoft Entra ID Privileged Identity Management (PIM) provides just-in-time privileged access to Microsoft Entra ID roles and Azure resources. It supports approval workflows, time-bound role assignments, automatic expiration, and detailed audit logging. Entitlement Management manages access to resources like groups and apps but is not specialized for administrative roles. Identity Protection detects risks. Conditional Access enforces access policies.

What should I do if I get this AZ-305 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.