Configure and validate access package approvals, time-limited PIM activation and emergency-access recovery in Northstar, alongside original questions and guided tickets.
Two original Northstar Services cases: an external access package and a privileged PIM activation. Use least privilege, approvals and effective-access verification to close each fictional ticket.
Northstar's outside consultant needs a Teams workspace, SharePoint files and one SaaS app for a 45-day engagement. The project sponsor will approve access and confirm it ends on time.
Configure real authorization boundaries in a fictional tenant, execute approvals and access transitions, and run positive and negative verification. Time advances only when you explicitly trigger a simulation step.
0 of 3 investigations independently verified · No Microsoft connection · No saved workbench state · Existing Practice 013 progress preservedApprove a scoped Northstar access package, verify the assigned partner while excluding an unrelated partner, apply a deny review, then reapprove a fresh request and demonstrate expiry.
Changing any setting resets the corresponding lifecycle and test results. Fix the baseline without granting broad access or weakening emergency recovery.
Approved package assignments are resource-specific and time-bounded. A denied review must have its decision applied before access is removed.
Submit the initial access request. Verify granted partner and excluded outsider while active. Apply the access-review denial, verify removal, then request/approve a new assignment and verify 30-day expiration.
No lifecycle actions yet. Choose controls, then execute the necessary transitions.
Run each explicit test at the correct point in the lifecycle; a premature denial cannot count as successful expiry or revocation evidence.
Revisit the guide or explore the SC-300 map for the other identity administration objectives.
