Reading Time: 7 minutes As an admin you want control over the creation of Teams channels or folder structures. Not every user is capable to provision channels the correct way. Disable the default for users to create but provide them a solution to create channels through a form. Use Azure Functions and Microsoft Teams Forms for the self-service.
Reading Time: 3 minutes Coming from an on-premises environment, it can be hard how to setup administrative accounts. On-premises was the default to have certain permissions. In Azure Active Directory that is a bit changed. This blog explains how to approach and why you should use Cloud-Only administrative accounts.
Reading Time: 5 minutes A Break Glass Account is an emergency account that grants access to critical resources when regular credentials are unavailable. It plays a vital role in ensuring business continuity during a crisis and enables a response strategy for cybersecurity threats. Shared and privileged accounts are the two types of Break Glass Accounts, and their use must be controlled and monitored to avoid security risks.
Reading Time: 5 minutes Before we used Terraform to deploy virtual machines with needed resources to Azure. Now we are using Terraform to accomplish the same to AWS. A Blogpost about the ins and outs.
Reading Time: 5 minutes Before we used Azure Bicep to deploy virtual machines with needed resources to Azure. Now we are using Terraform to accomplish the same. A Blogpost about the ins and outs.
Reading Time: 8 minutes Using Azure Bicep will give you the the control of deployment of resources in Azure. Every time deploying the bicep will check if the desired state still is available or needs to be changed. Using it in a DevOps Pipeline is great for continuous deployment.
Reading Time: 3 minutes In this part we are going to get all RBAC roles for Azure Active Directory and their members. Some identities are Eligible and some are Active. An overview of the status is needed to see if there is no legacy permissions assigned.
Reading Time: 5 minutes In this part we will get an export of the Conditional Access Policies and App Regsitrations and Enterprise Applications with there API permissions. Also the client secret or certificate information will be exported to get a good sight on it.
Reading Time: 2 minutes In this part we will take a look how to retrieve the licenses and organization information. We are going to use this information to write a small report at the end of the assessment.
Reading Time: 5 minutes Starting the assessment is to get all the users, groups and devices and their attributes.
Reading Time: 8 minutes To start the assessment, there is a need of an app registration with the correct permissions. Creating it through portal and with PowerShell and saving the connection details to an XML file.
Reading Time: 2 minutes With the use of Azure Active Directory and multiple administrator, the chance that it is going to be messy is big. To check if everything is correct created and managed, you can do an assessment.
| Cookie name | Active |
|---|
