AB-900 practice question 2

Privileged Identity Management provides time-bound role activation: an eligible user activates a privileged role for a limited period, and assignments can have start and end dates, optionally with approval and multifactor authentication. This limits how long elevated permissions exist. User lifecycle management and enterprise application management are separate Microsoft Entra capabilities, and PIM governs privileged roles rather than general access to Microsoft 365 services.