AZ-305 · Question 07 · Domain 1.2: Authentication and Authorization

You are designing a privileged access strategy for Azure subscriptions. Administrators must not have standing access to the 'Owner' role. When they need 'Owner' access, they must request it, provide a justification, and receive approval from a manager. The access must automatically expire after 4 hours. Which TWO components are required to implement this? (Select TWO)