Continue your lesson
Trace the identity, credential, token, assignment, policy decision, resource, and audit record for each access request.
Block 1 of 3Compare Access package · Entitlement management catalog
Current · 12 min
Compare Access package · Entitlement management catalog
Optional concept notes
Entitlement management catalog
Organizes resources and delegates who may package them for access requests.
Access package
Bundles groups applications and sites that a user can request or receive together.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 2 of 3Compare Access package assignment policy · Access package assignment · Access request approval · Entitlement assignment expiration
18 min
Compare Access package assignment policy · Access package assignment · Access request approval · Entitlement assignment expiration
Optional concept notes
Access package assignment policy
Defines who can request approval rules lifecycle and expiration for a package.
Access package assignment
Represents one subject's active or requested access through a package.
Access request approval
Requires selected approvers to decide whether a package assignment should be granted.
Entitlement assignment expiration
Ends package access automatically after a configured date or duration.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 3 of 3Compare Terms of Use · Entitlement sponsor
15 min
Compare Terms of Use · Entitlement sponsor
Optional concept notes
Terms of Use
Requires users to accept an organizational agreement as part of governed access.
Entitlement sponsor
Provides a responsible contact who can approve or review external-user access.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Practice the reasoning here
Use a fictional tenant. Draw one access path, apply least privilege, test an exception, and name the logs that would confirm the result.
- State the expected result before changing or testing anything.
- Name the observation, command, log, or report that would confirm it.
- Explain why the closest alternative does not fit the same requirement.
Check the whole objective
This unlocks objective 4.1 for recall. The latest checkpoint needs 70% or higher; a lower result puts the lesson back near the front of your timeline.