A financial services company frequently invites external partners as guest users into its Microsoft Entra ID tenant for short-term projects. Governance auditors have flagged that many guest accounts remain active long after projects end, creating a security risk. The identity team wants an automated solution that periodically requires guests' continued access to be justified and automatically removes access when no longer needed—without building custom scripts. Which solution should you recommend?