I need a central place to manage both always-on and on-demand RBAC role assignments for human users. Should these assignments be created directly at the tenant root management…
I need a central place to manage both on-demand and ambient (always-on) RBAC assignments for human users. Should these assignments be created directly at the tenant root group,…
How do you safely manage Entra ID role assignments and Privileged Identity Management (PIM) eligibility with Terraform? The deployment service principal needs a highly privileged role to assign…
I'm managing Entra ID role assignments and Privileged Identity Management eligibility with Terraform. The deployment service principals need highly privileged permissions—potentially enough to assign Global Administrator—which creates a…
Hey everyone! I'm working on an app that runs within a customer tenant and I've set up Microsoft Graph with Application.Read.All permissions. This allows me to retrieve service…
I've noticed some unknown managed identities and service principals assigned as owners and contributors at the subscription level. Their names seem like random strings of characters and numbers,…