SC-5008: Configure and govern entitlement with Microsoft Entra ID

Plan and implement entitlement management

• Define catalogs.
• Define access packages.
• Plan, implement and manage entitlements.
• Implement and manage terms of use.
• Manage the lifecycle of external users in Microsoft Entra Identity Governance settings.

Plan, implement, and manage access review

• Plan for access reviews
• Create access reviews for groups and apps
• Monitor the access review findings
• Manage licenses for access reviews
• Automate management tasks for access review
• Configure recurring access reviews

Monitor and maintain Microsoft Entra ID

• Analyze and investigate sign in logs to troubleshoot access issues
• Review and monitor Microsoft Entra audit logs
• Enable and integrate Microsoft Entra diagnostic logs with Log Analytics / Azure Sentinel
• Export sign in and audit logs to a third-party SIEM (security information and event management)
• Review Microsoft Entra activity by using Log Analytics / Azure Sentinel, excluding KQL (Kusto Query Language) use
• Analyze Microsoft Entra workbooks / reporting
• Configure notifications

Plan and implement privileged access

• Define a privileged access strategy for administrative users (resources, roles, approvals, and thresholds)
• Configure Privileged Identity Management for Microsoft Entra roles
• Configure Privileged Identity Management for Azure resources
• Assign roles
• Manage PIM requests
• Analyze PIM audit history and reports
• Create and manage emergency access accounts

Explore the many features of Microsoft Entra Permissions Management

• Understand the features of Microsoft Entra Permissions Management
• Learn more specifics about how Permissions Management allows you to discover, remediate, and monitor identities, permissions, and resources
• Get real-world views of the data and analytics Permissions Management provides