Using Entra Permissions Management to discover permissions across Azure, AWS, and GCP

SC-100 By islever Editorial Last updated

Design solutions for securing privileged access

Short answer

D Entra Permissions Management discovers and reviews permissions across Azure, AWS, and GCP in a single multicloud view.

Question

You have a multicloud environment that contains Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP) subscriptions. You need to discover and review role assignments across the subscriptions. What should you use?
  1. Azure Lighthouse
  2. Microsoft Defender for Identity
  3. Microsoft Entra ID Governance
  4. Microsoft Entra Permissions Management Correct Answer

Key Takeaways

Permissions Management (CIEM) is purpose-built for multicloud permission discovery and review across Azure, AWS, and GCP; Entra ID Governance and Defender for Identity are single-cloud/AD-focused, and Lighthouse is for Azure cross-tenant delegation.

To discover and review role assignments across Azure, AWS, and GCP subscriptions in a multicloud environment, use Microsoft Entra Permissions Management, a CIEM solution that provides cross-cloud visibility and management of permissions.

Common mistake: Choosing Entra ID Governance (C) — it governs identities within Entra ID but does not provide cross-cloud (AWS/GCP) permission discovery like Permissions Management.

Expert Analysis

Why the Answer Is Correct

Microsoft Entra Permissions Management (CIEM) is designed to discover and manage permissions across multiple cloud platforms, including Azure, AWS, and GCP, giving a centralized view of role assignments across the subscriptions.

Why the Other Options Are Wrong

Azure Lighthouse (A) is for delegating management of Azure resources to a partner/managing tenant, not for discovering AWS/GCP permissions. Defender for Identity (B) monitors on-premises AD DS only. Entra ID Governance (C) manages identity lifecycle within Entra ID but does not span AWS/GCP.

Community Comment Notes

The community favored D (80 votes). Comments cite the Permissions Management overview confirming cross-cloud (Azure, AWS, GCP) visibility; a minority (C, 20 votes) mistakenly suggested Entra ID Governance.

Official Reference

https://learn.microsoft.com/en-us/entra/permissions-management/overview

This link opens the official vendor documentation in a new tab.

Community Votes

D
80%
C
20%

80% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. Ali96 👍 2 Answered D
    Microsoft Entra Permissions Management is designed to provide visibility and management of permissions across multiple cloud platforms, including Azure, AWS, and GCP.
  2. tuyi2 👍 2 Answered D
    https://learn.microsoft.com/en-us/entra/permissions-management/overview
  3. 676ae1a 👍 1 Answered C
    La opción correcta es Gobernanza de identidades de Microsoft Entra La Gobernanza de identidades de Microsoft Entra te permite descubrir y revisar las asignaciones de roles en todas las suscripciones de Azure, AWS y GCP de manera centralizada y eficiente.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Using Microsoft Entra Permissions Management to find unused RBAC assignments

S-grade

Scenarios supported by compliant network check in Global Secure Access

S-grade

Removing the inbound firewall rule for an Entra application proxy connector

S-grade

Changing DNS MX records to route all inbound mail through Defender for Office 365

S-grade

Practice All SC-100 Questions

Access 110 questions with complete answers and detailed explanations.

View Full SC-100 Practice Test →

← Back to SC-100 Study Guide