KORRA.TUTOR Locking Down Identity — Conditional Access and Privileged Access
Identity is the one thing that spans a whole tenant, and most people who administer it have never configured it deliberately. This segment builds the controls, one at a time, in report-only first: a conditional access set enforced without locking anybody out, privileged roles moved from permanent to eligible, two emergency access accounts that have actually been used, and the count of permanently privileged accounts taken from eleven down to two.
4 個模組 · 12 堂課 · 9h 36m
用會員解鎖lock 課程內容
1 The Directory, and What a Role Assignment Grants 3 堂課 · 1h 45m lock
- play_circle Who Is In Here, and What Kind of Thing They Are 24分
- play_circle Principal, Role, Scope 26分
- play_circle The Group That Granted More Than Anyone Meant 55分
2 Conditional Access, One Policy at a Time 3 堂課 · 2h 28m lock
- play_circle What a Policy Is Made Of 28分
- play_circle Report-Only, and Reading the Report 60分
- play_circle The Protocol That Cannot Be Challenged 60分
3 Privileged Access: Eligible, Not Active 3 堂課 · 2h 31m lock
- play_circle Eligible Against Active 26分
- play_circle One Elevation, From Request to Expiry 65分
- play_circle Approval, and the Approver Who Is Asleep 60分
4 Break Glass, and the Policy That Locked Everybody Out 3 堂課 · 2h 52m lock
- play_circle The Account You Hope Never to Use 27分
- play_circle Lock Yourself Out On Purpose 70分
- play_circle The Cutover 75分