Modern Management Summit 2026 Privileged Access Strategy Best Practic... - Privileged Access Strategy - Best Practices and Common Mistakes when Tiering Cloud.pdf

1、Privileged Access Strategy-Best Practices and Common Mistakes when Tiering Cloud and ADMorten KnudsenMicrosoft MVP Azure,Security&Security Copilot|Microsoft Certified TrainerCloud&Security Architect,freelanceHow many roles do we have today in Entra ID and Azure?Date6thApril 202630thJan 20269thJune 2

2、02527thMay 2024Change in Last 10 monthsEntra ID Roles143134123110+20Azure Roles868838688542+180Session Objective Inspiration of how to design cloud services with delegation levels&service RBACs“PIM v2”(Microsoft Enterprise Access Model&RAMP)Lessons learned Pitfalls&Recommendations PIM for AD using P

3、IM for Entra ID Understanding the audience Works with PIM design&implementation?Experience with PIM Automations using IaC?Use RBACs in your PIM designs already?Use Administrative Units in your PIM designs?Knows about Microsoft Enterprise Access model with cloud tiering?Morten Knudsen Microsoft MVP A

4、zure,Security&Security Copilot(triple-MVP)Freelance cloud&security architect,2LINKIT Sold my 1stcompany(MindZet)in 2016 75 employees/in/knudsenmortendkaka.ms/Co-founderLead-organizer#ELDK2025,#ELDK26AgendaChallengesDemo PIM v2PIM“v2”design“Lessons learned”PIM for ADRApid Modernization Plan(RAMP)Quic

5、kly adopt Microsofts recommended privileged access strategy Separate and manage privileged accounts Emergency access accounts Enable Entra ID Privileged Identity Management Identify and categorize privileged accounts(Entra ID)Separate accounts(On-premises AD accounts)Monitoring of Active Directory D

6、efender for IdentityImprovecredentialmanagement experienceImplement and document self-service password reset and combined security information registrationProtect admin accounts-Enable and require MFA/Passwordlessfor Entra ID privileged usersBlock legacy authentication protocols for privileged user