You have 10 Azure subscriptions that contain 100 role-based access control (RBAC) role assignments. You plan to consolidate the role assignments. You need to recommend a solution to identify which…

Question

Options

• AMicrosoft Defender for Cloud
• BMicrosoft Entra access reviews
• CMicrosoft Entra Privileged Identity Management (PIM)
• DMicrosoft Entra Permissions Management

• A
  5% (2)
• B
  8% (3)
• C
  15% (6)
• D
  72% (28)

Explanation

Microsoft Entra Permissions Management (formerly CloudKnox) is a Cloud Infrastructure Entitlement Management (CIEM) solution that provides detailed analytics on permissions actually used versus permissions granted across Azure, AWS, and GCP. It can identify unused role assignments across multiple subscriptions and generate a Permissions Creep Index, making it the right tool for this scenario with minimal administrative effort. Microsoft Defender for Cloud (A) focuses on security posture and threat detection, not role assignment usage history. Microsoft Entra Access Reviews (B) are designed to review group memberships and app assignments periodically but do not analyze historical RBAC usage patterns. Microsoft Entra PIM (C) manages privileged role activation and can show assignment history for PIM-managed roles, but it does not efficiently surface unused RBAC assignments across 10 subscriptions at scale.

No community discussion yet for this question.