Exam SC-300 topic 4 question 73 discussion

Actual exam question from Microsoft's SC-300

Question #: 73
Topic #: 4

HOTSPOT
-

You have an Azure subscription named Sub1.

You plan to onboard Microsoft Entra Permissions Management.

You need to ensure that Permissions Management users can manage role assignments for Sub1. The solution must follow the principle of least privilege.

Which role should you assign and to which identity should you assign the role? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by dzdz at March 29, 2024, 2:23 p.m.

Comments

Submit Cancel

blanco00555

Highly Voted 1 year, 3 months ago

Correct. See: https://learn.microsoft.com/en-us/entra/permissions-management/onboard-enable-controller-after-onboarding#enable-or-disable-the-controller-in-azure

upvoted 9 times

...

dzdz

Highly Voted 1 year, 4 months ago

Role: User Access Administrator Identity: Microsoft Azure Management

upvoted 6 times

Alcpt

1 year, 2 months ago

i personally think MS will favour EPM over Cloud Infrastructure Entitlement Management (CIEM) as an answer even though they are both great solutions.Damn.

upvoted 2 times

Alcpt

1 year, 2 months ago

just to add, I feel that Cloud Infrastructure Entitlement Management (CIEM) is more multicloud focused (which is not the context of this question) whereas EPM is more Entra integrated in this single subscription based question. hence i will go for EPM.

upvoted 1 times

...

krzkrzkra

Most Recent 1 week, 6 days ago

User Cloud

upvoted 1 times

...

Obi_Wan_Jacoby

2 months, 3 weeks ago

Going with given answer. Reason being it seems "Microsoft Entra Permissions Management" is set to retire on October 1, 2025" and CIEM will continue to be used. I also read somehwere that "Microsoft Entra Permissions Management" is the service name and not the "Identity". Microsoft Entra Permissions Management is the name of the service itself, not a specific identity. This service provides Cloud Infrastructure Entitlement Management (CIEM) capabilities, offering comprehensive visibility and management of permissions across multicloud environments When assigning roles for permissions management tasks, you typically need to assign roles to specific service principals associated with the service, such as the Cloud Infrastructure Entitlements Management (CIEM) service principal

upvoted 1 times

...

rvln7

5 months ago

In the Check access section, in the Find box, enter Cloud Infrastructure Entitlement Management. The Cloud Infrastructure Entitlement Management assignments page appears, displaying the roles assigned to you. If you have read-only permission, the Role column displays Reader. If you have administrative permission, the Role column displays User Access Administrator. To add the administrative role assignment, return to the Access control (IAM) page, then select Add role assignment. https://learn.microsoft.com/en-us/entra/permissions-management/onboard-enable-controller-after-onboarding#enable-or-disable-the-controller-in-azure

upvoted 1 times

...