Duration

SC-5008- Configure and govern entitlement with Microsoft Entra ID

1 day

Overview

Microsoft Entra ID is a cloud-based identity and access management service that your employees can use to access external resources. Example resources include Microsoft 365, the Azure portal, and thousands of other SaaS applications.

Skills Covered

Plan and implement entitlement management
Plan, implement, and manage access review
Monitor and maintain Microsoft Entra ID
Plan and implement privileged access
Explore the many features of Microsoft Entra Permissions Management

Prerequisites

Basic Azure administration knowledge.
Ability to create users and groups using Microsoft Entra.

Module 1: Plan and implement entitlement management

When new users or external users join your site, quickly assigning them access to Azure solutions is a must. Explore how to entitle users to access your site and resources.

Learning objectives

By the end of this module, you will be able to:

Introduction

Define access packages
Exercise create and manage a resource catalog with Microsoft Entra entitlement management
Configure entitlement management
Exercise add terms of use acceptance report
Exercise manage the lifecycle of external users with Microsoft Entra identity governance
Configure and manage connected organizations
Review per-user entitlements
Knowledge check
Summary and resources

Module 2: Plan, implement, and manage access review

Once identity is deployed, proper governance using access reviews is necessary for a secure solution. Explore how to plan for and implement access reviews.

Learning objectives

By the end of this module, you will be able to:

Plan for access reviews
Create access reviews for groups and apps
Monitor the access review findings
Manage licenses for access reviews
Automate management tasks for access review
Configure recurring access reviews

Module 3: Monitor and maintain Microsoft Entra ID

Audit and diagnostic logs within Microsoft Entra ID provide a rich view into how users are accessing your Azure solution. Learn to monitor, troubleshoot, and analyze sign-in data.

Learning objectives

By the end of this module, you’ll be able to:

Analyze and investigate sign in logs to troubleshoot access issues
Review and monitor Microsoft Entra audit logs
Enable and integrate Microsoft Entra diagnostic logs with Log Analytics / Azure Sentinel
Export sign in and audit logs to a third-party SIEM (security information and event management)
Review Microsoft Entra activity by using Log Analytics / Azure Sentinel, excluding KQL (Kusto Query Language) use
Analyze Microsoft Entra workbooks / reporting
Configure notifications

Module 4: Plan and implement privileged access

Ensuring that administrative roles are protected and managed to increase your Azure solution security is a must. Explore how to use PIM to protect your data and resources.

Learning objectives

By the end of this module, you will be able to:

Define a privileged access strategy for administrative users (resources, roles, approvals, and thresholds)
Configure Privileged Identity Management for Microsoft Entra roles
Configure Privileged Identity Management for Azure resources
Assign roles
Manage PIM requests
Analyze PIM audit history and reports
Create and manage emergency access accounts

Module 5: Explore the many features of Microsoft Entra Permissions Management

While diving deeper into the features of Microsoft Entra Permissions Management, we use the framework of discover, remediate, monitor as a guide to help walkthrough how the Permissions Management features set can benefit your organization.

Learning objectives

By the end of this module, you’ll be able to:

Understand the features of Microsoft Entra Permissions Management
Learn more specifics about how Permissions Management allows you to discover, remediate, and monitor identities, permissions, and resources
Get real-world views of the data and analytics Permissions Management provides

Programme scope, delivery arrangements and suitability are confirmed during enquiry.