Which Additional Clouds Can Microsoft Entra Permissions Management Manage?

SC-300 By islever Editorial Last updated

Short answer

D Microsoft Entra Permissions Management can manage AWS and GCP in addition to Azure, but not Alibaba Cloud.

Question

You have accounts for the following cloud platforms: • Azure • Alibaba Cloud • Amazon Web Services (AWS) • Google Cloud Platform (GCP) You configure an Azure subscription to use Microsoft Entra Permissions Management to manage the permissions in Azure only. Which additional cloud platforms can be managed by using Permissions Management?
  1. AWS only
  2. Alibaba Cloud and AWS only
  3. Alibaba Cloud and GCP only
  4. AWS and GCP only Correct Answer
  5. Alibaba Cloud, AWS, and GCP

Key Takeaways

It tests the supported cloud environments for Entra Permissions Management and the trap of assuming any major cloud such as Alibaba Cloud can be connected.

Microsoft Entra Permissions Management is a multicloud CIEM service that supports Azure, AWS, and GCP. This SC-300 question tests whether you know Alibaba Cloud is not a supported platform, making AWS and GCP only the correct additional clouds (D).

Common mistake: Choosing E is the common mistake: learners assume Permissions Management supports all major clouds, but Alibaba Cloud has no onboarding connector.

Expert Analysis

Why the Answer Is Correct

Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) service whose supported cloud environments are Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). The scenario already covers Azure, so the additional platforms that can be onboarded are AWS and GCP only. There is no Alibaba Cloud connector in Permissions Management, which is why option D is correct. Thetootall confirmed from an exam attempt: "There is no connector for Alibaba Cloud - only AWS and GCP". Multiple commenters, including CodexFT and penatuna, repeat the same supported set of Azure, AWS, and GCP. That aligns with the product's multicloud CIEM scope and rules out any option containing Alibaba Cloud.

Why the Other Options Are Wrong

Option A is wrong because AWS only omits Google Cloud Platform, which Permissions Management can also manage alongside Azure. Option B is wrong because it adds Alibaba Cloud, an unsupported platform, while still omitting GCP. Option C is wrong because it pairs Alibaba Cloud with GCP but leaves out AWS. Option E is the most tempting because it lists all major clouds, but Alibaba Cloud is not supported by Permissions Management. Therefore the only set of additional supported clouds is AWS and GCP, making D correct.

Community Comment Notes

The strongest learner evidence comes from thetootall, who answered D and reported "There is no connector for Alibaba Cloud - only AWS and GCP"; this matches the official cloud list. Siraf, CodexFT, and penatuna all describe Permissions Management as providing visibility and control across Azure, AWS, and GCP, which supports D. Sozo and GeorgiAngelov selected E and argued for broad multicloud support, including Alibaba Cloud, but their claim is not backed by the product's onboarding connectors. When a commenter lists Azure, AWS, and GCP yet still picks E, the safer exam interpretation is to follow the explicit supported-platform list rather than the label “all major clouds.”

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

Memorize the exact supported cloud list for Microsoft Entra Permissions Management: Azure, AWS, and GCP. On SC-300 scenario questions, eliminate any option that adds Alibaba Cloud, even if it sounds like a major multicloud provider. The question says Azure is already configured, so pick the two remaining supported clouds.

Frequently Asked Questions

Why is Alibaba Cloud not manageable with Entra Permissions Management?

Permissions Management onboarding currently covers Azure, AWS, and GCP only; Alibaba Cloud lacks a supported connector, so option E is incorrect.

If I already onboard Azure, do I need to onboard AWS and GCP separately?

Yes. AWS and GCP are supported additional cloud environments, but each must be connected or onboarded separately in Permissions Management.

More SC-300 FAQ →

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 7 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 7

  1. Siraf 👍 4
    Answer is D: : Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) solution that provides comprehensive visibility into permissions assigned to all identities (users and workloads), actions, and resources across cloud infrastructures. It detects, right-sizes, and monitors unused and excessive permissions and enables Zero Trust security through least privilege access in Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). https://learn.microsoft.com/en-us/entra/permissions-management.
  2. CodexFT 👍 4 Answered D
    Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) solution that provides comprehensive visibility into permissions assigned to all identities. For example, over-privileged workload and user identities, actions, and resources across multicloud infrastructures in Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP).
  3. thetootall 👍 4 Answered D
    On exam 7/18/24, answered D There is no connector for Alibaba Cloud - only AWS and GCP
  4. penatuna 👍 3 Answered D
    As a multicloud product, Permissions Management offers a comprehensive experience across multiple cloud environments; Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). Permissions Management provides you with granular visibility into what's happening in your cloud environments and offers actionable insights on both a high- and low-level. Just a few of the things that Permissions Management can help you discover are: • Exposed/Vulnerable storage containers • Over-permissioned users and groups • Inactive users, groups, resources, and applications • Global Administrator identities in your environment • Open network security groups https://learn.microsoft.com/en-us/entra/permissions-management/onboard-enable-tenant
  5. throwaway10188 👍 3
    https://learn.microsoft.com/en-us/entra/identity/saas-apps/tutorial-list#cloud-integrations
Show 2 more comments
  1. Sozo 👍 1 Answered E
    Microsoft Entra Permissions Management supports all the major cloud platforms, including Azure, Alibaba Cloud, AWS, and GCP. It allows you to discover, remediate, and monitor permission risks for any identity or resource across your cloud infrastructures. You can also implement consistent security policies and automate the principle of least privilege across your entire multicloud environment.
  2. GeorgiAngelov 👍 1
    #E Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) product that provides comprehensive visibility and control over permissions for any identity and any resource in Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP).

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

How Long Are Microsoft Entra Risky User Activity Logs Retained?

S-grade

Azure User-Assigned Managed Identity Regional Scope

S-grade

Which role for the Permissions Management service principal?

S-grade

Prerequisite for Microsoft Defender for Cloud Apps Session Policy

S-grade

Practice All SC-300 Questions

Access 80 questions with complete answers and detailed explanations.

View Full SC-300 Practice Test →

← Back to SC-300 Study Guide