Durguti.net

Creating Custom Roles with Specific Permissions in Azure AD

Creating custom roles with specific permissions in Azure Active Directory (Azure AD) can be a useful way to grant users the exact level of access they need, without giving them unnecessary privileges. Here’s a step-by-step guide on how to do it:

Step 1: Understand Azure AD Roles and Permissions

Azure AD has a set of built-in roles, such as Global Administrator, User Administrator, and Security Administrator. These roles have predefined permissions that you can assign to users. However, if the built-in roles don’t meet your specific needs, you can create custom roles. Continue reading →

Here are the key steps to automate the revocation of privileged roles in Azure AD:

1. Use Azure AD Privileged Identity Management (PIM): PIM provides the ability to create access reviews for Azure AD roles. This allows you to regularly review privileged access and automatically revoke unnecessary permissions.
   Continue reading →

Here are a few ways to automate the reporting of Azure AD role assignments:

1. Use PowerShell scripts:
   The Get-AzRoleAssignmentReport.ps1 script fetches role assignments and compiles them into a comprehensive report sent via email.
   It requires the managed identity used by the script to have the “Directory Readers” Continue reading →