Previous

Next

Summary and knowledge check

Completed

Privileged access management allows granular access control over privileged admin tasks in Microsoft Purview. Privileged access management requires users to request just-in-time access to complete elevated and privileged tasks through a highly scoped and time-bound approval workflow. This configuration gives users just-enough-access to perform the task at hand without risking exposure of sensitive data or critical configuration settings.

Now that you have completed this module, you should be able to:

• Explain the difference between privileged access management and privileged identity management.
• Describe the privileged access management process flow.
• Describe how to configure and enable privileged access management.

Check your knowledge

1.

Privileged access management provides just-in-time access at different scopes. What does just-in-time access protect against?

Reduces the attack surface of standing privileged accounts 

Reduces the risk of privileged access abuse

Reduces access to customer content in Exchange Online, SharePoint Online, and OneDrive for Business.

2.

Before you can get started with privileged access management you need to do which of the following?

Create an approver’s group

Enable privileged access

Create an access policy

3.

True or false: If you select to choose manual approval for high risk tasks like setting a journal rule, you cannot choose a different approval group beyond the default approval group.

True

False

You must answer all questions before checking your work.

Continue