Question

Your company uses Microsoft Entra entitlement management to grant access to a sensitive finance application through an access package. Compliance requires that when an employee requests the package, the request must first be approved by the requestor's manager and then, only after the manager approves, by a designated finance governance team member. If either approver takes no action, the request must be automatically denied after 7 days. Which access package policy configuration meets these requirements?

Accepted Answer

Configure a two-stage approval process with the first stage set to the manager and the second stage set to the finance governance member, and set a request expiration of 7 days.

Answer

Configure a single-stage approval with both the manager and a finance governance member added as approvers, requiring approval from both.

Answer

Configure two separate access packages, one approved by the manager and one by the finance team, and require the user to request both.

Answer

Configure a single-stage approval with the manager as the approver and an access review that the finance team completes after access is granted.