KORRA.TUTOR Locking Down Identity — Conditional Access and Privileged Access
Identity is the one thing that spans a whole tenant, and most people who administer it have never configured it deliberately. This segment builds the controls, one at a time, in report-only first: a conditional access set enforced without locking anybody out, privileged roles moved from permanent to eligible, two emergency access accounts that have actually been used, and the count of permanently privileged accounts taken from eleven down to two.
4 modiwl · 12 gwers · 9h 36m
Datgloi gydag aelodaethlock Cynnwys y cwrs
1 The Directory, and What a Role Assignment Grants 3 gwers · 1h 45m lock
- play_circle Who Is In Here, and What Kind of Thing They Are 24 mun
- play_circle Principal, Role, Scope 26 mun
- play_circle The Group That Granted More Than Anyone Meant 55 mun
2 Conditional Access, One Policy at a Time 3 gwers · 2h 28m lock
- play_circle What a Policy Is Made Of 28 mun
- play_circle Report-Only, and Reading the Report 60 mun
- play_circle The Protocol That Cannot Be Challenged 60 mun
3 Privileged Access: Eligible, Not Active 3 gwers · 2h 31m lock
- play_circle Eligible Against Active 26 mun
- play_circle One Elevation, From Request to Expiry 65 mun
- play_circle Approval, and the Approver Who Is Asleep 60 mun
4 Break Glass, and the Policy That Locked Everybody Out 3 gwers · 2h 52m lock
- play_circle The Account You Hope Never to Use 27 mun
- play_circle Lock Yourself Out On Purpose 70 mun
- play_circle The Cutover 75 mun