nerdexam
Microsoft

SC-300 · Question #399

You have a Microsoft 365 subscription that is onboarded to Microsoft Entra Permissions Management. You need to identify managed identities that are assigned permissions and remove any permissions…

The correct answer is A. Configure an Autopilot rule. Microsoft Entra Permissions Management includes an Autopilot feature that allows you to create prebuilt or custom rules to automatically remediate permissions based on usage patterns, including removing unused permissions after a specified period such as 90 days. The…

Submitted by ricky.ec· Mar 6, 2026Plan and implement workload identities

Question

You have a Microsoft 365 subscription that is onboarded to Microsoft Entra Permissions Management. You need to identify managed identities that are assigned permissions and remove any permissions that have been unused for 90 days. The solution must minimize administrative effort. What should you do in the Entra Permissions Management portal?

Options

  • AConfigure an Autopilot rule.
  • BSchedule a Permissions analytics report.
  • CFrom Microsoft Entra Insights, review Service principals with privileged role assignments.
  • DRun an audit query.

How the community answered

(43 responses)
  • A
    72% (31)
  • B
    5% (2)
  • C
    16% (7)
  • D
    7% (3)

Explanation

Microsoft Entra Permissions Management includes an Autopilot feature that allows you to create prebuilt or custom rules to automatically remediate permissions based on usage patterns, including removing unused permissions after a specified period such as 90 days. The Remediation tab in the Permissions Management portal supports Autopilot rules to automate right-sizing of permissions, reducing manual effort.

Topics

#Permissions Management#managed identities#Autopilot rules#unused permissions

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice