Designing Microsoft Azure Infrastructure Solutions AZ-305 — Question 1

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the Microsoft 365 E5 plan. You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements: • To the manager of the developers, send a monthly email message that lists the access permissions to Application1. • If the manager does not verify an access permission, automatically revoke that permission. • Minimize development effort. What should you recommend?