問題文
An agent needs access to a line-of-business API for a limited period, and the grant must be reviewable and time-bound. Which mechanism fits?
選択肢
- Creating a sensitivity label that permits the API call and applying it to the agent, because the label's usage rights are evaluated whenever the agent acts and can therefore be revoked centrally when the period ends.
- Sharing the API key with the agent's owner by email so that the owner configures it directly on the agent, which keeps the grant entirely inside the team that is accountable for the agent and avoids involving a central process.
- An access package in entitlement management, which makes the agent's access intentional, auditable, and time-bound, so that the grant expires on its own at the end of the period rather than waiting for somebody to remember that it has to be removed.
- Adding the agent to the Global Administrator role for the duration of the project and removing it afterwards, because that role reaches every resource in the tenant and therefore guarantees the call will not fail for a missing permission during the trial.