Episode Details
Back to Episodes
Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 3: Mastering Azure Identity and Access Management
Published 1 month, 3 weeks ago
Description
In this lesson, you’ll learn about managing identity and access in Microsoft Azure, aligned with the AZ-500 certification, with a strong focus on security and privileged access control:Azure Active Directory Identity Protection
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
- Detecting and responding to risky sign-ins and accounts, such as:
- Logins from anonymous IPs (e.g., via Tor)
- Unusual behavior or leaked credentials
- Identifying vulnerabilities like:
- Users without Multi-Factor Authentication (MFA)
- Weak or exposed credentials
- Using automated policies to:
- Trigger alerts
- Enforce remediation (e.g., force password reset or MFA)
- Understanding structure:
- Azure AD Tenant → Identity layer
- Azure Subscription → Resource management layer
- Differentiating roles:
- Azure AD roles → Manage users, groups, identities
- Azure RBAC roles → Manage cloud resources
- Core RBAC roles:
- Owner → Full control
- Contributor → Modify resources (no access control)
- Reader → View-only access
- Assigning roles to:
- Users
- Groups
- Service principals
- Using Azure AD Privileged Identity Management (PIM) to reduce risk from privileged accounts
- Key concepts:
- Just-In-Time (JIT) access → No permanent admin rights
- Time-bound activation → Roles expire automatically
- Approval workflows → Require authorization before elevation
- MFA enforcement for sensitive roles
- Governance features:
- Access reviews to validate ongoing need for permissions
- Auditing and tracking privileged activity
- Simulating risky behavior (e.g., Tor login) to trigger alerts
- Enforcing Conditional Access + PIM together for layered security
- Managing identities using least privilege principles
- Choosing cost-effective identity protection solutions
- Understanding hybrid identity (e.g., Azure AD Connect basics)
- Combining:
- Conditional Access
- Identity Protection
- PIM
- Identity is the primary security boundary in cloud environments
- Privileged access must be:
- Temporary
- Audited
- Strictly controlled
- Combining detection (Identity Protection) with control (PIM + RBAC) provides strong defense against account compromise
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy