You have three Azure subscriptions that are linked to a single Microsoft Entra tenant.
You need to evaluate and remediate the risks associated with highly privileged accounts. The solution must minimize administrative effort.
What should you use?
Correct Answer: B
To evaluate and remediate risks associated with highly privileged accounts across multiple Azure subscriptions tied to one Microsoft Entra tenant, the recommended tool is Microsoft Entra Privileged Identity Management (PIM). PIM allows you to centrally manage, monitor, and govern privileged access to both Azure resources and Microsoft Entra administrative roles, offering features like time-bound eligibility, just-in-time activation, access reviews, and alerts. TheTechTrails+2Microsoft Learn+2 Because the subscriptions are all under a single tenant, PIM can cover all of them (via Azure RBAC and directory roles) without needing separate tools per subscription. Using PIM minimizes administrative overhead because you don't need to manually track or audit each high privilege account-you can enforce policies, schedule reviews, and use automation. Permissions Management (option D) is more about managing entitlements across cloud resources, rather than governing privileged administrative roles. Therefore, PIM is the correct choice.