Question

Your organization wants administrators to request activation of the Global Administrator role only when needed, and each activation request must be approved by a designated reviewer before the role becomes active. Which Microsoft Entra capability should you configure to meet this requirement?

Accepted Answer

Configure an eligible assignment in Privileged Identity Management with an approval requirement

Answer

Assign the role as a permanent active assignment and create an access review

Answer

Create a Conditional Access policy that requires MFA for the Global Administrator role

Answer

Add the administrators to an access package in entitlement management