Describe the capabilities of Microsoft Entra →easyMultiple ChoiceObjective-mapped

SC-900 Describe the capabilities of Microsoft Entra Practice Question

Exhibit

Refer to the exhibit.

```json
{
  "properties": {
    "displayName": "HR App",
    "description": "Access package for HR application",
    "catalogId": "catalog1",
    "policyType": "userManaged",
    "approvalRequired": true,
    "approvalStages": [
      {
        "approvalTimeout": 14,
        "approvalRequiredFor": "guest",
        "primaryApprover": {
          "id": "manager"
        }
      }
    ]
  }
}
```

Refer to the exhibit. You are configuring an access package in Microsoft Entra Entitlement Management. Based on the policy, which users can request access to the HR App?

⚠ Common exam trap

The trap here is that candidates may misinterpret the approval setting as applying to all users, when in fact it is configured only for guest users, leading them to incorrectly select an option that implies restricted access or exclusive guest access.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Any user in the organization can request access, but guests require manager approval.

The access package policy shown in the exhibit is configured with 'For users in your directory' as the scope and 'Specific connected organization' is not selected, meaning any internal user can request. The policy also has 'Approval' set to 'Manager approval' only for 'Guest users', so internal users do not require approval, while guests do. This matches the description that any user in the organization can request, but guests need manager approval.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Any user in the organization can request access, but guests require manager approval.
Why this is correct
This option accurately describes a common configuration in Azure AD entitlement management access packages. A policy configured for "users in your directory" typically allows all internal members to request access. Furthermore, entitlement management policies offer granular control to specify different approval requirements, such as mandating manager approval specifically for guest users, while internal users might have a different or no approval flow. This balances self-service with necessary oversight for external collaborators.
✗
Only administrators can assign access.
Why it's wrong here
This statement is incorrect because the core purpose of Azure AD entitlement management and access packages, especially with a UserManaged policy type, is to empower end-users to request access themselves. This self-service model significantly reduces the administrative burden on IT teams. While administrators retain the ability to directly assign access, they are not the exclusive assigners; eligible users can initiate requests based on defined policies.
✗
Only users in the HR department can request access.
Why it's wrong here
This option is incorrect because the policy described does not inherently restrict requestors to a specific department like HR. While entitlement management policies can be scoped to specific Azure AD groups or connected organizations, a general "Any user in the organization" setting, as implied by the correct answer, indicates a broader audience. Without explicit conditions or group memberships targeting only the HR department, this limitation is not enforced.
✗
Only guest users can request access.
Why it's wrong here
This statement is incorrect as the policy does not exclusively limit access requests to guest users. Instead, it indicates that any user in the organization, including both members and guests, can initiate a request. The condition that guests require manager approval is an additional requirement for a specific user type, not a restriction that only guests are permitted to request access to the access package.

Go deeper

SC-900 Describe the capabilities of Microsoft Entra Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question