How to apply just-in-time access to Security & Compliance roles

I am often asked by clients how they can provide additional levels of controls to their Security and Compliance privileged roles to mitigate the risks of excessive, unnecessary, or misused access permissions to important resources.

Microsoft recommends the following best practice for managing privileged accounts:

  • Use least privileged access
  • Turn on multi-factor authentication for all your administrator accounts
  • Use Privileged Identity Management to grant just-in-time access with optional approvals
  • Configure recurring access reviews to revoke unneeded permissions over time

If you have Azure AD Premium 2 licensing you can use Azure AD Privilege Identity Management (PIM) to provide just-in-time access to privileged admin accounts. PIM only provides just-in-time access to Azure AD and Azure privileged roles. The issue with Security and Compliance roles is that they are managed in Security and Compliance admin Centers and not in Azure AD.

So how can we protect Security and Compliance roles with just-in-time access to mitigate the risks of excessive, unnecessary, or misused access permissions to important resources?

Read on to discover how to use Privileged Access Groups in PIM to indirectly provide just-in-time access to your Security & Compliance roles. In addition, this process will work with other non-Azure AD roles such as roles from Exchange or SharePoint.


Read More

How to track Microsoft Docs page updates in Microsoft To-do

How do you keep track of Microsoft Docs page updates?

Wouldn’t it be great if you could be notified when your favourite Microsoft Docs pages are updated rather than having to go to Microsoft Docs pages daily or relying on social media?

Read on and I will explain how you can create an RSS feed from Microsoft Search results to create a task in Microsoft To Do every time one of your favourite Microsoft Docs pages is updated.


Read More

Use Power Automate to bulk export members from Microsoft Teams

How can I quickly export a list of all members in a specific Team? As a Microsoft Team’s owner you have probably come to the conclusion that managing your Team membership is not easy.

This blog is a two part blog. Read part one to see how you can use Power Automate to bulk add new members into a Microsoft Team.

Part two of the blog now explains how you can use Power Automate to automatically export a list of members from a Team into an Excel spreadsheet. With the added bonus of including several user attributes such as job title, mobile or office along side their name and email.


Read More

Use Power Automate to bulk add members into Microsoft Teams

How can I add many members into my Microsoft Teams quickly and easily? As a Microsoft Team’s owner then you have probably come to the conclusion that managing your Team membership is not easy.

This blog explains how you can use Power Automate to automatically bulk add members into any Microsoft Team that you own.

I will walk through four scenarios

  1. Automatically add members to a Team using email addresses.
  2. Automatically add members to a Team using their display names.
  3. Automatically add a list of managers to a Team as owners and their direct reports as members.
  4. Create a data entry field in the Power Automate flow to allow the owner to choose which Team to import the users into.

Read part two of the blog to see how you can use Power Automate to export members of a Team into an Excel spreadsheet.


Read More