Comprehensive and Detailed Explanation with all Microsoft SC-300: Identity and Access Administrator documents: =
According to the SC-300 exam guide and the official Microsoft Entra ID (Azure AD) Entitlement Management documentation, access packages provide a streamlined way to manage resource access lifecycle for users — including SharePoint Online sites, Microsoft 365 Groups, Teams, and applications — with the ability to define time-limited access.
When you configure an access package, you can:
Include resources like SharePoint Online sites and Microsoft 365 groups.
Assign users or groups (like Group1) as eligible requesters.
Set an access duration (for example, 90 days) after which access automatically expires.
The feature requires minimal administrative effort because the process is automated: the access duration ensures that permissions are revoked without manual intervention.
Microsoft documentation confirms:
“Entitlement management access packages enable you to define access policies for users and automatically remove access after a specified time period, minimizing administrative overhead.”
Therefore, to grant Group1 members access to Site1 for 90 days, the correct and most efficient solution is to use an access package rather than an access review, workflow, or Conditional Access policy.
