You have an Azure subscription named Sub1. You purchase a Microsoft Entra Permissions Management license. You need to onboard Permissions Management. Which two actions should you perform? Each…

The correct answer is B. From Microsoft Entra Permissions Management, configure data collection. C. Create a role assignment for Sub1. Explanation Onboarding Microsoft Entra Permissions Management requires two key steps: configuring data collection within Permissions Management itself (B), which tells the service which cloud environments (Azure, AWS, GCP) to monitor and how to collect authorization data, and…

Submitted by hans_de· Mar 6, 2026Plan and implement identity governance

Question

You have an Azure subscription named Sub1. You purchase a Microsoft Entra Permissions Management license. You need to onboard Permissions Management. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

AImplement a Microsoft Entra application proxy.
BFrom Microsoft Entra Permissions Management, configure data collection.
CCreate a role assignment for Sub1.
DFrom the Microsoft Entra admin center, configure the Diagnostic settings.
EFrom the Microsoft Entra admin center, create an app registration.
FFrom the Azure portal, create a data collection rule (DCR).

How the community answered

(47 responses)

A
2% (1)
B
72% (34)
D
17% (8)
E
2% (1)
F
6% (3)

Explanation

Onboarding Microsoft Entra Permissions Management requires two key steps: configuring data collection within Permissions Management itself (B), which tells the service which cloud environments (Azure, AWS, GCP) to monitor and how to collect authorization data, and creating a role assignment for the Azure subscription (C), which grants Permissions Management the necessary permissions to read and analyze access data within Sub1. These two actions together establish both the connectivity and the access rights needed for the service to function.

Why the distractors are wrong:

A (App Proxy) is for providing secure remote access to on-premises apps - unrelated to Permissions Management onboarding.
D (Diagnostic settings) is used for routing Azure Monitor logs, not for setting up Permissions Management.
E (App registration) is not a required step for onboarding Permissions Management to an Azure subscription (it is relevant for AWS/GCP onboarding scenarios, not Azure).
F (DCR) is an Azure Monitor concept for log collection pipelines - not part of Permissions Management setup.

Memory Tip: Think of onboarding as needing "Access + Instructions" - the role assignment (C) gives Permissions Management access to your subscription, while data collection configuration (B) gives it instructions on what to collect. No access + no instructions = nothing works.

Topics

#Microsoft Entra Permissions Management#Data collection#Role assignment#Onboarding

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice