Question

Your organization uses entitlement management to grant employees access to a set of applications and groups bundled in an access package. The HR team wants all users whose 'department' attribute equals 'Finance' to automatically receive this access package without submitting a request, and to have the access automatically removed if their department changes. You need to configure this with minimal ongoing administrative effort. What should you do?

Accepted Answer

Create an automatic assignment policy on the access package with a membership rule based on the user's department attribute.

Answer

Create a dynamic security group for Finance and assign the access package directly to that group as a resource.

Answer

Configure an access package policy that requires approval, then add all Finance users as approvers.

Answer

Set up a recurring access review scoped to the Finance department to grant access to qualifying users.