An organization needs to implement Microsoft Entra ID entitlement management so that when an employee transfers from the Sales department to Engineering, their Sales access is automatically removed and Engineering access is granted. Which entitlement management feature enables this automation?
Select an answer to reveal the explanation.
Short Explanation
You'll use access package policies with automatic assignment based on user attributes. When the employee's department attribute changes from Sales to Engineering, the policy can remove Sales access and grant Engineering access automatically.
Full Explanation
Access package policies with automatic assignment based on user attributes is correct because access package policies support automatic assignment based on user attributes such as department. When an employee's department attribute changes from Sales to Engineering, automatic assignment policies can remove the Sales access package and grant the Engineering access package without manual intervention. Connected organizations with automatic assignment is incorrect because connected organizations in entitlement management are for external business-to-business collaboration scenarios. Lifecycle workflows with custom extension tasks is incorrect because lifecycle workflows with custom extensions require more complex orchestration and are not the primary built-in mechanism for attribute-driven access package transitions. Access reviews with auto-apply to remove stale assignments is incorrect because access reviews remove stale access periodically but do not automatically add the new department's access package.