SC-5008: Configure and govern entitlement with Microsoft Entra ID

Modules

Module 1: Plan and implement entitlement management

When new users or external partners join your environment, providing them with timely and secure access to Azure solutions is essential. This module explores how to grant and manage entitlements for site access and resources.

Learning objectives
By the end of this module, you will be able to:

• Define catalogues.
• Define access packages.
• Plan, implement, and manage entitlements.
• Configure and manage terms of use.
• Manage the lifecycle of external users through Microsoft Entra Identity Governance.

Module 2: Plan, implement, and manage access reviews

Once identities are deployed, ongoing governance through access reviews is critical for maintaining security. This module explores how to plan, configure, and manage access reviews effectively.

Learning objectives
By the end of this module, you will be able to:

• Plan access reviews.
• Create access reviews for groups and applications.
• Monitor access review results.
• Manage licences for access reviews.
• Automate access review management tasks.
• Configure recurring access reviews.

Module 3: Monitor and maintain Microsoft Entra ID

Microsoft Entra ID audit and diagnostic logs provide valuable insight into user activity and system access. This module explains how to monitor, troubleshoot, and analyse sign-in and audit data.

Learning objectives
By the end of this module, you will be able to:

• Analyse and investigate sign-in logs to troubleshoot access issues.
• Review and monitor Microsoft Entra audit logs.
• Enable and integrate diagnostic logs with Log Analytics and Microsoft Sentinel.
• Export sign-in and audit logs to a third-party SIEM (Security Information and Event Management).
• Review Microsoft Entra activity with Log Analytics and Microsoft Sentinel (excluding KQL usage).
• Analyse Microsoft Entra workbooks and reporting.
• Configure notifications for key events.

Module 4: Plan and implement privileged access

Protecting and managing administrative roles is essential for securing Azure resources. This module covers how to use Privileged Identity Management (PIM) to safeguard data and resources.

Learning objectives
By the end of this module, you will be able to:

• Define a privileged access strategy for administrators (including resources, roles, approvals, and thresholds).
• Configure PIM for Microsoft Entra roles.
• Configure PIM for Azure resources.
• Assign roles through PIM.
• Manage PIM role activation requests.
• Analyse PIM audit history and reports.
• Create and manage emergency access accounts.

Module 5: Explore Microsoft Entra Permissions Management features

This module examines Microsoft Entra Permissions Management through the framework of discover, remediate, monitor, highlighting how its feature set helps strengthen organisational security.

Learning objectives
By the end of this module, you will be able to:

• Describe the features of Microsoft Entra Permissions Management.
• Explain how Permissions Management enables discovery, remediation, and monitoring of identities, permissions, and resources.
• Interpret real-world data and analytics provided by Permissions Management.