How it works...
In Active Directory, by default, any user can access the contents of the directory to look up objects. Password(hashe)s are off limits, of course. Some organizations have limited this default access.
As many organizations synchronize user objects from Active Directory to Azure AD, many Azure AD tenants contain personal data for people inside organizations. By default, anyone can log in to the Azure portal with any browser and view the list of users, including many of their attributes, except, of course, passwords or password hashes. Because Azure AD is a cloud-based resource, by default anyone may access this information from any location. This is the big difference with Active Directory: looking up objects in Azure AD doesn't ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access