あなたは、User1という名前のユーザーを含むMicrosoft 365サブスクリプションを所有しています。 ユーザー1は、以下のタスクを実行するために管理者権限が必要です。 Microsoft Exchange Online の設定を管理します。 Microsoft 365グループを作成します。 ユーザー1には管理者権限を8時間のみ付与し、役割割り当てを行う前に承認が必要となるようにする必要があります。 何を使うべきでしょうか?
正解:D
Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Microsoft Entra ID and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator and Privileged Role Administrator role assignments. Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure