What should you recommend?

You have an Azure subscription that contains a custom application named Application was developed by an external company named fabric, Ltd. Developers at Fabrikam were assigned role-based access control (RBAV) permissions to the Application components. All users are licensed for the Microsoft 365 E5 plan.

You need to recommends a solution to verify whether the Faricak developers still require permissions to Application1.

The solution must the following requirements.

* To the manager of the developers, send a monthly email message that lists the access permissions to Application1.

* If the manager does not verify access permission, automatically revoke that permission.

* Minimize development effort.

What should you recommend?
A . In Azure Active Directory (AD) Privileged Identity Management, create a custom role assignment for the Application1 resources
B . Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet
C . Create an Azure Automation runbook that runs the Get-AzureRmRoleAssignment cmdlet
D . In Azure Active Directory (Azure AD), create an access review of Application1

View Answer

Answer: D

Explanation:

https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-user-access-with-access-reviews

Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User’s access can be reviewed on a regular basis to make sure only the right people have continued access. Have reviews recur periodically: You can set up recurring access reviews of users at set frequencies such as weekly, monthly, quarterly or annually, and the reviewers will be notified at the start of each review. Reviewers can approve or deny access with a friendly interface and with the help of smart recommendations.

Why are access reviews important?

"Azure AD enables you to collaborate with users from inside your organization and with external users. Users can join groups, invite guests, connect to cloud apps, and work remotely from their work or personal devices. The convenience of using self-service has led to a need for better access management capabilities."