📖 What is Access Packages?
Access packages are bundles of resources, including group memberships, applications, and SharePoint sites, that can be assigned to users. They enable a self-service request process for access, often integrated with an approval workflow to maintain strict security boundaries.
"Think of these as 'onboarding kits'. They are a core component of Entra ID Governance and are used to manage external user access efficiently."
📚 Certification: Microsoft 365 Administrator (MS-102)
🔑 What are the Key Concepts of Access Packages?
- ▸ Catalogs act as containers for access packages, allowing administrators to delegate the management of specific resource bundles to non-global administrators.
- ▸ Policies define the eligibility criteria for users, whether a manager's approval is required, and the specific duration of the granted access.
- ▸ Resource bundling allows the combination of M365 groups, Teams, and Enterprise Applications into a single requestable unit for streamlined user onboarding.
- ▸ Lifecycle management automates access removal through mandatory expiration dates and integrated access reviews to maintain a strict least-privilege security posture.
- ▸ External user integration simplifies B2B collaboration by enabling guest users to request specific resources via a self-service portal without manual admin intervention.
🎯 How does Access Packages appear on the MS-102 Exam?
You may be asked to design a process for onboarding external consultants who need temporary, time-bound access to a specific SharePoint site and a Teams channel.
A scenario might describe a requirement to delegate the approval of application access to department managers rather than IT admins; identify Access Packages as the solution.
Expect questions about ensuring that project-based access is automatically revoked after a set period, requiring the configuration of an access package policy with expiration.
❓ Frequently Asked Questions
How do Access Packages differ from standard Security Groups?
While groups provide the actual permission, Access Packages wrap groups and other resources into a governed request process featuring approvals, eligibility rules, and automated expiration dates.
What is the role of a Catalog in the Entitlement Management process?
Catalogs organize access packages and enable administrative delegation. A catalog owner can create and manage packages for their department without needing high-level Entra ID administrative roles.
Can Access Packages be used for internal employees as well as external guests?
Yes, policies can be configured to target internal users, external users, or both, making them ideal for both internal department onboarding and external partner collaboration.