How it works...
Azure AD PIM offers management, control, and monitoring of privileged access. By minimizing the number of admins and the time these people are actually equipped as admins with their privileges, Azure AD tenants can be hardened.
Always-on administrative privileges might seem like a good idea, but are not. Even the most dedicated admin would only need these privileges 10 out of 24 hours and only on some weekends. Azure AD PIM offers a solution to this situation: automatically-expiring privileges that admins need to specifically unlock.
In its most basic form, up to four people are assigned permanent Global administrator privileges. One account is configured as a break-glass account and also has these privileges. The roles for ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access