A company has accumulated hundreds of external guest accounts in Microsoft Entra ID over the past two years. Management wants an automated, recurring process where resource owners periodically confirm whether each guest still needs access, with the system automatically removing guests that are not approved. Which Microsoft Entra capability should the company use?