Describing entitlement and access reviews

Entitlement management provides this governance through the creation of catalogs and access packages, which you can build for groups of users. Entitlement management is found under Identity Governance within Azure AD. Figure 7.2 shows the Getting started tile of this service and where Entitlement management is found in the menu:

Figure 7.2 – Identity Governance services

Let's discuss how catalogs and access packages work to provide this governance.

Catalogs

The first step in entitlement management is to create catalogs. These catalogs can be created within the Identity Governance services in Azure AD under the Entitlement management menu, as shown in Figure 7.3:

Figure 7.3 – Entitlement management menu

Catalogs are a collection of users and groups, applications, and SharePoint sites. To create these catalogs, you must be assigned the Identity Governance Administrator...