How deeply does Azure Security cover entitlement management?

Defines packages, approvals, expiration, and monitoring, but stops short of detailed configuration procedures.

Entitlement management

A Microsoft Entra capability that automates lifecycle-based access to groups, applications, teams, and SharePoint sites.

Entitlement management automates lifecycle-based access to groups, applications, teams, and SharePoint sites. It addresses the operational gap left by access reviews: reviewing and removing outdated access does not grant new access or simplify the request process. section 2.6.3

Use entitlement management to:

Create access packages aligned with business or project needs. section 2.6.3
Require approvals and set expiration dates so access remains appropriate and time limited. section 2.6.3
Monitor which assets users access, how long access lasts, and whether access remains justified. section 2.6.3

Project transition

When users move between projects or departments, access reviews can remove permissions from the previous project. Entitlement management adds a structured way to provide access to the new project’s applications, groups, teams, or SharePoint sites. section 2.6.3

How Azure Security covers it

liveBook manning.com

Read Azure Security on liveBook Get the book at manning.com

Related concepts

identity governance and administrationpart of · Identity governance and administration is the discipline of governing identity lifecycles, entitlements, access requests, approvals, and access reviews.
access reviewcontrasts with · An access review is a formal examination of assigned permissions to determine whether they remain appropriate for an identity’s responsibilities.

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.