I had the opportunity to present a session at Teams Nation 2024 on 21 February 2024. Teams Nation is a free, community-driven online conference dedicated to Microsoft Teams, its underlying technologies, and extensibility options. It featured over 70 sessions across multiple tracks covering topics like Adoption & Governance, Security & Compliance, Productivity, Meetings & Calling, Education & Community, Build & Extend, Devices & Spaces, and The Power Platform.
…How to add sensitivity labels to my existing groups, teams and sites? This was a question I was asked after one of my previous blogs on how to protect your groups, Teams and sites. If you only have a small number of groups, teams and sites, then it is easy to manually add the container sensitivity label to each group team or site. But what happens when you have thousands of groups, couples and sites?
Fortunately, there is a way to automate this task using PnP PowerShell. In this blog post, I will walk you through the steps needed first to analyze your existing groups, teams and site and then to programmatically apply container sensitivity labels to your existing Teams, Groups, and Sites in Microsoft 365 to help you protect your important data from unauthorized access and accidental sharing.
…📢It’s good news for Microsoft Purview Compliance Manager.
You can now bulk import your updated improvement actions directly into Microsoft Purview Compliance Manager using the Improvement actions export report. With no APIs or programmatic interfaces, bulk import is a significant improvement.
Having the ability to work on your improvement actions outside of the Microsoft Purview Admin Center is extremely helpful. You can work on the improvement actions with multiple businesses and IT stakeholders without giving them admin rights. In the past, any changes to improvement actions had to be manually updated in Compliance Manager. Organisations often only focus on the initial export of data, so they miss out on automatic testing notifications, reporting and updates.
By using the Excel export file to bulk upload your changes into Compliance Manager, there is no need to rekey any information, which is a significant time-saving improvement.
Additionally, keeping the Compliance Manager updated lets you see the impact of changes to regulations or configuration changes via automated testing.
Read on to find out more.
…I am often asked by clients how they can provide additional levels of controls to their Security and Compliance privileged roles to mitigate the risks of excessive, unnecessary, or misused access permissions to important resources.
Microsoft recommends the following best practice for managing privileged accounts:
If you have Azure AD Premium 2 licensing you can use Azure AD Privilege Identity Management (PIM) to provide just-in-time access to privileged admin accounts. PIM only provides just-in-time access to Azure AD and Azure privileged roles. The issue with Security and Compliance roles is that they are managed in Security and Compliance admin Centers and not in Azure AD.
So how can we protect Security and Compliance roles with just-in-time access to mitigate the risks of excessive, unnecessary, or misused access permissions to important resources?
Read on to discover how to use Privileged Access Groups in PIM to indirectly provide just-in-time access to your Security & Compliance roles. In addition, this process will work with other non-Azure AD roles such as roles from Exchange or SharePoint.
…
