What happens when a user who has Entitlement A transfers departments and is part of Role B?

• A. Access is automatically updated to reflect the new department.
• B. The user keeps Entitlement A regardless of the department.
• C. Entitlement A is removed if not applicable to the new department.
• D. The user retains access only for the Service department.

Answer: (C)

The correct answer is that Entitlement A is removed if it is not applicable to the new department. In identity governance and management systems, entitlement management plays a crucial role in ensuring that users have access that is relevant and appropriate to their current role and department.

When a user transfers to a new department, any entitlements that were previously assigned may not be suitable for the new role they will assume. Therefore, as part of the principle of least privilege and to maintain security and compliance, the system will typically evaluate access rights and remove any entitlements that are no longer relevant to the user's new department.

This approach not only prevents unnecessary or excessive access but also aligns with the organization’s policies regarding access management, ensuring that users only retain permissions necessary for their current role. If Entitlement A is designed for the functions or responsibilities associated with the previous department, it would naturally be revoked as the user's context changes.