You manage 10 Azure web apps integrated with Azure AD. Users move frequently between project teams. Project managers must be able to review and remove users from their project’s app, and must receive an automated prompt every 30 days to verify assignments. Which Azure capability meets these requirements?

Azure AD Identity Governance is the correct choice because it provides the features needed for managing user access lifecycles, including access reviews and entitlement management. Access reviews allow project managers to periodically verify and remove user assignments, and they can be configured for recurring prompts (e.g., every 30 days). Entitlement management enables self-service access requests and automated access assignments based on roles, which simplifies user movement between teams. Azure AD Identity Protection focuses on detecting and remediating identity-based risks. Microsoft Defender for Identity is an on-premises solution for detecting advanced threats and compromised identities. Microsoft Entra Permissions Management (formerly CloudKnox) focuses on managing permissions for identities across multi-cloud environments, not specifically user access reviews within Azure AD.