Exam SC-300 topic 4 question 26 discussion

Went to my tenant, tried creating access package under resource Roles with teams and sharepoint site and it is saying No groups in Default catalog, however, there is a checkbox which allows all groups and teams NOT in default catalog to show up, so technically I CAN create access package without creating a catalog first, but this is MS and question says "First" so I pick D, Create a catalog

From the SC-300 book by Dwayne Natwick, 1st Edition, 2022, page 293: "The first step in entitlement management is to create catalogs. If you do not create a catalog for your access packages, users will have access to the general catalog. If you want to clearly define the catalog, then one should be created because you cannot move an access package to another catalog once it is created."

Answer: D To create an entitlement management workflow in Microsoft Entra ID Governance (formerly Azure AD entitlement management), the first step is to create a catalog. Here's the typical workflow: Create a catalog A catalog is a container for resources (like SharePoint sites, Teams, groups, apps) and access packages. You must have a catalog before you can create an access package. Add resources to the catalog In your case, this would include Site1 (SharePoint Online) and Team1 (Microsoft Teams). Create an access package This defines who can request access, what they get access to, and how approval and lifecycle policies are handled. Configure policies Set up request, approval, and expiration policies for the access package.

The correct answer is: **D. Create a catalog.** Explanation: In **Azure AD entitlement management**, a **catalog** is the first step in organizing resources like SharePoint Online sites (Site1) and Teams (Team1). A catalog contains access packages, which are used to bundle resources and assign access to users. Once the catalog is created, you can add Site1 and Team1 to the catalog, then create an access package that includes both resources for users to request access to.

1) Create a catalog to add all your resources 2) create access package and define policy on who can request access and to what resources

Create a catalog

The catalog has to exist before you can complete the package.

To initiate an entitlement management workflow for managing Site1 and Team1 in Microsoft 365, the first step is to create an access package. Access packages are fundamental to defining and managing access to resources, facilitating a streamlined entitlement management process. Therefore, the correct option is: C. Create an access package.

C. create an catalog, assign the ressources you need. then create a access package... I do this regularily with partner companies.

https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-create#overview

C. Create an access package. To create an entitlement management workflow to manage Site1 and Team1, you should start by creating an access package.

I think the C will work. But the best way to do it is D... Create a new catalog, group ressources inside and create an access package.

I would say C. Reason: There is a Built-in catalog called "General". Therefore I can directly create an Access Package. Checked this in my tenant under: Azure AD-> Identity Governance | Catalogs Also from MS: "If you don't specify a catalog, your access package goes in the general catalog" https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-create#overview Therefore, it seems that it is not necessary to first create a catalog.

D. Create a catalog.

it is C, watch this https://youtu.be/LGpgqRVG65g?t=8115

The correct answer is D - Create a catalog Access packages for governed applications should be in a designated catalog. If you don't already have a catalog for your application governance scenario, create a catalog in Microsoft Entra entitlement management. https://learn.microsoft.com/en-us/azure/active-directory/governance/identity-governance-applications-deploy#deploy-entitlement-management-policies-for-automating-access-assignment

Voting for D, Catalog