Set of features, and the licence for them, covering lifecycle workflows, entitlement management and access reviews.
Also called ID Governance.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Microsoft Entra ID Governance in context, with comparison tables and the common traps.
Terms in this definition
- Set
Secret permission in Key Vault for writing secrets; some older material refers to it as Create.
- Document Intelligence add-on capabilities
Extra Document Intelligence options switched on with the features query parameter: barcodes, formulas, keyValuePairs, languages, ocrHighResolution, queryFields and styleFont.
- Licence
What entitles one particular user to the services a subscription offers. Each product licence is made up of several service plans (one per app or service), and before giving it to someone an admin has to record that user's usage location.
- Lifecycle workflows
Automation in Microsoft Entra ID Governance that carries out onboarding, role-change and offboarding steps (say, emailing a new hire, putting someone in groups or removing a licence) when a trigger such as their start date arrives.
- Entitlement management
Entra ID Governance capability built around access packages, which can require approval, expire automatically and include connected organisations.
- Access reviews
Microsoft Entra ID Governance capability that periodically asks reviewers or users themselves to confirm membership for guests, app users or groups, removing anyone who does not respond. PIM, by contrast, handles privileged roles.
Related terms
- Automatic assignment policy
Works much like a dynamic group: a membership rule based on user attributes decides who gets an access package and removes assignments when people stop matching. It is an ID Governance entitlement management feature, and neither catalog owners nor access package managers are allowed to set one up.
- E5
Top-tier Microsoft 365 licensing bundle that includes Entra ID P2 together with ID Governance capabilities.
- Identity Governance Administrator
Can configure access reviews, access packages, catalogs and policies in Microsoft Entra ID Governance. It is a privileged Microsoft Entra role.
- Microsoft Entra
The umbrella brand covering Microsoft's identity and network access portfolio. Internet Access, Private Access, External ID and ID Governance all belong to it, built on top of the core directory service, Entra ID.
- Microsoft Entra Suite
One licence covering the premium features of five products: Private Access, Internet Access, ID Governance, ID Protection and Verified ID. Microsoft Entra ID P1 is a prerequisite, and Microsoft 365 E7 includes it.
- My Access
Self-service website, at myaccess.microsoft.com, for browsing access packages and asking to be given one; approvers sign in there too, to accept or deny what has been asked for. Licensing is Microsoft Entra ID P2 or ID Governance.