azure:qnd:azure_iam

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
azure:qnd:azure_iam [2022/08/15 18:31] – mguptonazure:qnd:azure_iam [2022/09/03 13:00] (current) – [Azure IAM] mgupton
Line 1: Line 1:
 ====== Azure IAM ====== ====== Azure IAM ======
 +  * [[https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-overview]]
   * Azure has two separate/distinct scopes of access control — one for Azure AD and one for Azure resources.   * Azure has two separate/distinct scopes of access control — one for Azure AD and one for Azure resources.
   * A user with the //Global Administrator// role in AAD can elevate themselves to have the RBAC //User Administrator// role at the root (''/'') level over all subscriptions and management groups. This allows them to assign RBAC roles to themselves and others.   * A user with the //Global Administrator// role in AAD can elevate themselves to have the RBAC //User Administrator// role at the root (''/'') level over all subscriptions and management groups. This allows them to assign RBAC roles to themselves and others.
 +
 +> **Azure AD roles** – Sometimes referred to as directory roles, Azure AD roles include built-in and custom roles to manage Azure AD and other Microsoft 365 online services.
 +
 +> **Azure roles** – The role-based access control (RBAC) roles in Azure that grants access to management groups, subscriptions, resource groups, and resources.
 +
 +[[https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-deployment-plan|reference]]
 ====== Misc Tools/Commands ====== ====== Misc Tools/Commands ======
   * Windows command ''dsregcmd /status'' can be used to check if machine is AAD joined   * Windows command ''dsregcmd /status'' can be used to check if machine is AAD joined
  • azure/qnd/azure_iam.1660588274.txt.gz
  • Last modified: 2022/08/15 18:31
  • by mgupton