Microsoft Azure Solutions Architect Expert AZ-305 Practice Question

Entitlement management (part of Microsoft Entra ID Identity Governance) lets administrators create access packages that bundle groups, applications, and SharePoint sites. Packages can include expiration policies, periodic reviews, and automated removal of access when the assignment expires. Non-administrators can be delegated as catalog owners or request approvers, enabling business managers to manage access without elevated directory roles. Privileged Identity Management focuses on just-in-time elevation of directory or Azure roles, not application or group access. Conditional Access governs sign-in conditions but does not provide package-based delegation or automatic access expiration. Cross-tenant B2B direct connect manages authentication between tenants and does not address fine-grained resource assignment with delegated approvals or expirations.