A large enterprise uses a Microsoft Entra ID Governance access package for AI platform access. The access package includes Azure Machine Learning workspace member role, Azure OpenAI user role, and AI data store access. A business partner organization needs access to the same resources for a 6-month project. Which Entitlement Management feature allows external users to request the access package?

The correct approach is to configure the access package policy to allow users from connected external organizations, such as the partner tenant, to request access. Microsoft Entra Entitlement Management supports connected organizations, so you can add the partner organization's Entra ID tenant as a connected organization and configure the access package policy to permit users from that tenant to request the access package. Partners can then use the My Access portal to request the access package, which goes through the configured approval workflow. This scales to many external users without manual invitation for each person.

Manually inviting each partner user as a B2B guest and assigning roles individually is wrong because it does not scale, lacks the governed lifecycle management of access packages, and bypasses the approval workflow. Creating a separate access package for external users with a different set of resources is wrong because it is an option but is not necessary if the same resources are appropriate; the question asks about allowing external users to request the existing package. Enabling the access package for all users, including external users, via the My Access portal with no approval requirement is wrong because it removes governance controls for external access, which violates security best practices, especially for AI platform access.