Continue your lesson
Trace the identity, credential, token, assignment, policy decision, resource, and audit record for each access request.
Block 1 of 3Compare Group access review · Application access review
Current · 12 min
Compare Group access review · Application access review
Optional concept notes
Group access review
Periodically asks reviewers to confirm membership in a selected group.
Application access review
Periodically validates user assignments to an enterprise application.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 2 of 3Compare Privileged role access review · Recurring access review · Access review reviewer
18 min
Compare Privileged role access review · Recurring access review · Access review reviewer
Optional concept notes
Privileged role access review
Periodically validates eligible or active membership in selected Microsoft Entra roles.
Recurring access review
Runs review decisions repeatedly on a configured schedule.
Access review reviewer
Identifies the users managers owners or sponsors responsible for access decisions.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 3 of 3Compare Auto-apply access review results · Inactive-user review scope · Access review decision helper
18 min
Compare Auto-apply access review results · Inactive-user review scope · Access review decision helper
Optional concept notes
Auto-apply access review results
Automatically changes access after a review completes according to final decisions.
Inactive-user review scope
Focuses a review on users who have not signed in during a configured interval.
Access review decision helper
Shows last sign-in and recommendation context to support a review decision.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Practice the reasoning here
Use a fictional tenant. Draw one access path, apply least privilege, test an exception, and name the logs that would confirm the result.
- State the expected result before changing or testing anything.
- Name the observation, command, log, or report that would confirm it.
- Explain why the closest alternative does not fit the same requirement.
Check the whole objective
This unlocks objective 4.2 for recall. The latest checkpoint needs 70% or higher; a lower result puts the lesson back near the front of your timeline.