KORRA.TUTOR Locking Down Identity — Conditional Access and Privileged Access
Identity is the one thing that spans a whole tenant, and most people who administer it have never configured it deliberately. This segment builds the controls, one at a time, in report-only first: a conditional access set enforced without locking anybody out, privileged roles moved from permanent to eligible, two emergency access accounts that have actually been used, and the count of permanently privileged accounts taken from eleven down to two.
4 modules · 12 lessons · 9h 36m
Unlock with the membershiplock Course contents
1 The Directory, and What a Role Assignment Grants 3 lessons · 1h 45m lock
- play_circle Who Is In Here, and What Kind of Thing They Are 24m
- play_circle Principal, Role, Scope 26m
- play_circle The Group That Granted More Than Anyone Meant 55m
2 Conditional Access, One Policy at a Time 3 lessons · 2h 28m lock
- play_circle What a Policy Is Made Of 28m
- play_circle Report-Only, and Reading the Report 60m
- play_circle The Protocol That Cannot Be Challenged 60m
3 Privileged Access: Eligible, Not Active 3 lessons · 2h 31m lock
- play_circle Eligible Against Active 26m
- play_circle One Elevation, From Request to Expiry 65m
- play_circle Approval, and the Approver Who Is Asleep 60m
4 Break Glass, and the Policy That Locked Everybody Out 3 lessons · 2h 52m lock
- play_circle The Account You Hope Never to Use 27m
- play_circle Lock Yourself Out On Purpose 70m
- play_circle The Cutover 75m