SC-5008: Configure and govern entitlement with Microsoft Entra ID
- Administrator
Training Overview
This course covers the management of user rights and access in Microsoft Entra ID. You will learn how to define access catalogues and packages, manage rights and the lifecycle of external users. The course also covers access revisions, monitoring connection and audit logs, and integration with Log Analytics and Azure Sentinel. Finally, you will discover how to set up a privileged access strategy and explore the features of Microsoft Entra Permissions Management.
Training Objectives
At the end of this course, participants will be able to :
- Configure and govern entitlements with Microsoft Entra ID.
To follow this course you need to know the basics of Azure administration (level AZ-900: Azure Fundamentals) and how to create users and groups using Microsoft Entra.
Plan and implement entitlement management
- Define catalogs.
- Define access packages.
- Plan, implement, and manage usage rights.
- Implement and manage the terms of use.
- Manage the lifecycle of external users in the Microsoft Entra ID Governance settings.
Plan, implement, and manage access review
- Schedule access reviews.
- Create access reviews for groups and apps.
- Monitor the results of the access review.
- Manage licenses for access reviews.
- Automate management tasks for access review.
- Set up recurring access reviews.
Monitor and manage Microsoft Entra ID
- Analyze and review connection logs to troubleshoot access issues.
- Review and monitor Microsoft Entra audit logs.
- Enable and integrate Microsoft Entra diagnostic logs with Log Analytics / Azure Sentinel.
- Export sign-in and audit logs to a third-party SIEM (security information and event management).
- Review Microsoft Entra activity using Log Analytics/Azure Sentinel, excluding the use of Kusto Query Language (KQL).
- Analyze Microsoft Entra workbooks and reports.
- Configurer les notifications.
Plan and implement privileged access
- Define a privileged access policy for administrative users (resources, roles, approvals, and thresholds).
- Configure Privileged Identity Management for Microsoft Entra roles.
- Configure Privileged Identity Management for Azure resources.
- Assign roles.
- Manage PIM requests.
- Analyze PIM audit history and reports.
- Create and manage emergency access accounts.
Updated on 08/26/2025
In this training, we mix theory with technical workshops to quickly make you operational. Additionally, each participant receives course materials at the end of the training.
One of our consultant trainers conducts the training. With solid field experience, they make the learning process both interactive and enriching.
For assessment, the trainer regularly asks questions and uses various methods to continuously measure your progress. This approach promotes a dynamic and engaging learning experience.
After the training, we ask you to complete a satisfaction questionnaire. Your feedback helps us to maintain and constantly improve the quality of our training.
Finally, we offer the flexibility to deliver this training both in-person and remotely, and it can be customized to meet your company’s specific needs upon request.
You can register for one of our training courses up to two business days before it starts, if there are still available places and you signed quote.
If you have specific needs related to a disability, please do not hesitate to make a request; we are happy to adjust our services according to the type of disability.
Nos formations sur la même thématique
SC-5006 : Enhance security operations by using Microsoft Security Copilot
SC-100 : Microsoft Cybersecurity Architect

AZ-900 : Cloud Azure Infrastructure Presentation

SC-300 : Microsoft identity and access administrator

SC-401 : Protect sensitive information with Microsoft Purview in the AI era

SC-200 : Microsoft Security Operations Analyst

SC-900 : Introduction to Microsoft Security, Compliance, and Identity
