{"id":40358,"date":"2023-06-06T14:00:00","date_gmt":"2023-06-06T14:00:00","guid":{"rendered":"https:\/\/infrasos.com\/?p=40358"},"modified":"2023-08-28T13:45:12","modified_gmt":"2023-08-28T13:45:12","slug":"azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively","status":"publish","type":"post","link":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/","title":{"rendered":"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"40358\" class=\"elementor elementor-40358\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d2ee9ff ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d2ee9ff\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-795eadc ot-flex-column-vertical\" data-id=\"795eadc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8659e28 elementor-widget elementor-widget-text-editor\" data-id=\"8659e28\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively. Are you responsible for managing Azure AD <a href=\"https:\/\/infrasos.com\/azure-ad-custom-roles-create-manage-custom-roles-for-azure-ad\/\">roles<\/a> and seeking to develop a best practices strategy for Role-Based<a href=\"https:\/\/infrasos.com\/how-to-implement-role-based-access-control-in-office-365\/\"> Access Control<\/a>?\u00a0<\/p><p>To develop a best practices strategy, you must first understand the Roles and Role-Based Access Control concept in Azure AD. This article commences by explaining these Azure AD concepts.<\/p><p>Following that, the guide outlines 10 best practices for efficient<a href=\"https:\/\/infrasos.com\/azure-ad-privileged-identity-management-manage-monitor-privileged-accounts\/\"> management<\/a> of Azure AD Roles and Privileges.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d77b803 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d77b803\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1f0bb6d ot-flex-column-vertical\" data-id=\"1f0bb6d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-edb1a9f elementor-widget elementor-widget-text-editor\" data-id=\"edb1a9f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/azure-ad-custom-roles-create-manage-custom-roles-for-azure-ad\/\">Azure AD Custom Roles: Create &amp; Manage Custom Roles for Azure AD<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f64d68d ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"f64d68d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9a460a1 ot-flex-column-vertical\" data-id=\"9a460a1\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6d3d224 elementor-widget elementor-widget-heading\" data-id=\"6d3d224\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-large\">What are Roles and Role-Based Access Control in Azure AD?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d5a9b57 elementor-widget elementor-widget-text-editor\" data-id=\"d5a9b57\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Azure AD uses roles to manage directory resources. Assigning roles to<a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-user-reports\/\"> users<\/a>, <a href=\"https:\/\/infrasos.com\/office-365-reporting\/office-365-group-reports\/\">groups<\/a>, or other objects is known as Azure AD role-based <a href=\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\">access control<\/a> (Azure AD <a href=\"https:\/\/infrasos.com\/how-to-implement-role-based-access-control-in-office-365\/\">RBAC)<\/a>.<\/p><p>Regarding roles, Azure AD offers multiple built-in options with specific permissions. However, there may be rare instances where the built-in roles do not fully meet the needs of organizations.<\/p><p>In such cases, admins create <a href=\"https:\/\/infrasos.com\/azure-ad-custom-roles-create-manage-custom-roles-for-azure-ad\/\">custom roles<\/a> with limited permissions to address their requirements.<\/p><p>The 3 most important Azure AD built-in roles include Billing Admin, User Admin, and Global Admin. To view all roles available in Azure AD, navigate to &#8220;Roles and administrators&#8221; in the Azure Active Directory portal.<\/p><p>It is crucial to mention that users with a free Azure AD subscription can use built-in roles. However, a user must be assigned the Azure AD Premium P1 <a href=\"https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/active-directory\/\" target=\"_blank\" rel=\"noopener\">license<\/a> to create custom roles.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-51b672a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"51b672a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-88e9833 ot-flex-column-vertical\" data-id=\"88e9833\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-57f66df elementor-widget elementor-widget-text-editor\" data-id=\"57f66df\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/how-to-implement-role-based-access-control-in-office-365\/\">How to Implement Role-Based Access Control in Office 365<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-aacad2b ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"aacad2b\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d905ed6 ot-flex-column-vertical\" data-id=\"d905ed6\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-73c05db elementor-widget elementor-widget-heading\" data-id=\"73c05db\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Best Practices for Azure AD Role-Based Access Control<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-60e6b43 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"60e6b43\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d8b84a2 ot-flex-column-vertical\" data-id=\"d8b84a2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-417edfd elementor-widget elementor-widget-heading\" data-id=\"417edfd\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">1. Use Built-in Azure AD Roles where Possible<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6e005d0 elementor-widget elementor-widget-text-editor\" data-id=\"6e005d0\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Find an existing role and use it to assign resource management. Azure AD has more than 70 built-in roles.<\/p><p>However, if none meets your need, create and use custom roles.<\/p><p>To check Azure AD roles, sign in to <a href=\"https:\/\/portal.azure.com\/\" target=\"_blank\" rel=\"noopener\">porta.azure.com<\/a>. Search for and open &#8220;azure active directory.&#8221;<\/p><p>Finally, click &#8220;Roles and administrators&#8221;.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e2bfe63 elementor-widget elementor-widget-image\" data-id=\"e2bfe63\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/view-Built-in-Azure-AD-Roles-in-Azure-AD-portal.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDA4ODQsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC92aWV3LUJ1aWx0LWluLUF6dXJlLUFELVJvbGVzLWluLUF6dXJlLUFELXBvcnRhbC5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/view-Built-in-Azure-AD-Roles-in-Azure-AD-portal-q7a8xdjb8fe3mlm8mezyyyae8rebaixpxq9tbq180e.jpg\" title=\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively\" alt=\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d020fd8 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d020fd8\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-62c423c ot-flex-column-vertical\" data-id=\"62c423c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-907ca74 elementor-widget elementor-widget-text-editor\" data-id=\"907ca74\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/the-importance-of-role-based-access-control-in-azure-ad\/\">The Importance of Role-Based Access Control in Azure AD<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-204eb1f ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"204eb1f\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-225c10e ot-flex-column-vertical\" data-id=\"225c10e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e37f8e3 elementor-widget elementor-widget-heading\" data-id=\"e37f8e3\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">2. Approach Azure AD RBAC from the Principle of Least Privilege<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b94e685 elementor-widget elementor-widget-text-editor\" data-id=\"b94e685\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The &#8220;Least Privilege&#8221; principle promotes granting admins the explicit permission required to perform a task. Following this guideline limits the risk to your <a href=\"https:\/\/infrasos.com\/active-directory-security-best-practices-protecting-your-environment\/\">environment<\/a>.<\/p><p>Embracing this principle may require creating custom roles. This is essential as existing roles may have more permissions than you need to assign for a specific task.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-44a9573 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"44a9573\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c50b9a0 ot-flex-column-vertical\" data-id=\"c50b9a0\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-40f9f37 elementor-widget elementor-widget-heading\" data-id=\"40f9f37\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">3. Assign Permissions for a Limited time using Just-in-time Access<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-10adefa elementor-widget elementor-widget-text-editor\" data-id=\"10adefa\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Another feature of the &#8220;Least Privilege,&#8221; approach is to grant users permission for a limited time.<\/p><p>To achieve this, admins use the Azure AD Privileged <a href=\"https:\/\/infrasos.com\/azure-ad-privileged-identity-management-manage-monitor-privileged-accounts\/\">Identity Management<\/a> (<a href=\"https:\/\/infrasos.com\/azure-ad-privileged-identity-management-manage-monitor-privileged-accounts\/\">PIM<\/a>). This feature allows granting of just-in-time access to another admin.<\/p><p>Once you enable Azure AD PIM, admins that require permissions request authorization. After that, <a href=\"https:\/\/infrasos.com\/office-365-identity-access-manage-user-accounts-permissions\/\">users<\/a> in the approver&#8217;s <a href=\"https:\/\/infrasos.com\/new-mggroupmemberbyref-add-users-to-azure-ad-group-using-powershell\/\">group<\/a>\u00a0grant or deny the request.<\/p><p>With just-in-time access, Admins avoid granting permissions for unlimited periods by utilizing Azure AD Role-Based Access Control, making it one of the crucial best practices.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b710b6c ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b710b6c\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a6c0a30 ot-flex-column-vertical\" data-id=\"a6c0a30\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-dd70700 elementor-widget elementor-widget-text-editor\" data-id=\"dd70700\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/\">Try our Active Directory Reporting Tool<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-56061f9 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"56061f9\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3d758fe ot-flex-column-vertical\" data-id=\"3d758fe\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-58900a0 elementor-widget elementor-widget-heading\" data-id=\"58900a0\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">4. Minimize the Vulnerability and Attack Surface of Privileged Accounts<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c448e6c elementor-widget elementor-widget-text-editor\" data-id=\"c448e6c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Azure AD has some privileged roles, with the Global Admins role having the highest access. <a href=\"https:\/\/infrasos.com\/protecting-against-phishing-attacks-in-office-365\/\">Attackers<\/a> target these accounts because gaining access grants them the immediate authorization to cause the most significant harm.<\/p><p>So, it is best practice to reduce these accounts&#8217;<a href=\"https:\/\/infrasos.com\/top-15-best-vulnerability-scanner-tools-in-cybersecurity\/\"> vulnerability<\/a> and attack surface. One way to achieve this is by limiting the number of admins assigned the Global Admin role to a maximum of 5.<\/p><p>Why is this best practice crucial?<\/p><p>This role has full access to modify <strong>all resources<\/strong> in the Microsoft 365 tenant.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-68dcc75d ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"68dcc75d\" data-element_type=\"section\" data-settings=\"{&quot;animation&quot;:&quot;bounceInRight&quot;,&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-312ac016 ot-flex-column-vertical\" data-id=\"312ac016\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2f710515 elementor-widget elementor-widget-heading\" data-id=\"2f710515\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Try our Active Directory & Office 365 Reporting & Auditing Tools<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1fa17cf3 elementor-widget elementor-widget-text-editor\" data-id=\"1fa17cf3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p style=\"text-align: center;\"><strong><span style=\"color: #ff6600;\">Try us out<\/span> for <span style=\"color: #ff0000;\">Free<\/span>.\u00a0 100&#8217;s of report templates available. Easily customise your own reports on AD, Azure AD &amp; Office 355.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-7c7d6504 ot-flex-column-vertical\" data-id=\"7c7d6504\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-411982d3 elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"411982d3\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor-pro - v3.10.3 - 29-01-2023 *\/\n.elementor-button.elementor-hidden,.elementor-hidden{display:none}.e-form__step{width:100%}.e-form__step:not(.elementor-hidden){display:flex;flex-wrap:wrap}.e-form__buttons{flex-wrap:wrap}.e-form__buttons,.e-form__buttons__wrapper{display:flex}.e-form__indicators{display:flex;justify-content:space-between;align-items:center;flex-wrap:nowrap;font-size:13px;margin-bottom:var(--e-form-steps-indicators-spacing)}.e-form__indicators__indicator{display:flex;flex-direction:column;align-items:center;justify-content:center;flex-basis:0;padding:0 var(--e-form-steps-divider-gap)}.e-form__indicators__indicator__progress{width:100%;position:relative;background-color:var(--e-form-steps-indicator-progress-background-color);border-radius:var(--e-form-steps-indicator-progress-border-radius);overflow:hidden}.e-form__indicators__indicator__progress__meter{width:var(--e-form-steps-indicator-progress-meter-width,0);height:var(--e-form-steps-indicator-progress-height);line-height:var(--e-form-steps-indicator-progress-height);padding-right:15px;border-radius:var(--e-form-steps-indicator-progress-border-radius);background-color:var(--e-form-steps-indicator-progress-color);color:var(--e-form-steps-indicator-progress-meter-color);text-align:right;transition:width .1s linear}.e-form__indicators__indicator:first-child{padding-left:0}.e-form__indicators__indicator:last-child{padding-right:0}.e-form__indicators__indicator--state-inactive{color:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-inactive [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-inactive-secondary-color,#fff)}.e-form__indicators__indicator--state-inactive object,.e-form__indicators__indicator--state-inactive svg{fill:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-active{color:var(--e-form-steps-indicator-active-primary-color,#39b54a);border-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active object,.e-form__indicators__indicator--state-active svg{fill:var(--e-form-steps-indicator-active-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed{color:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator--state-completed [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator__label{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator--shape-none{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a);background-color:initial}.e-form__indicators__indicator--state-completed object,.e-form__indicators__indicator--state-completed svg{fill:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator__icon{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);font-size:var(--e-form-steps-indicator-icon-size);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;overflow:hidden;margin-bottom:10px}.e-form__indicators__indicator__icon img,.e-form__indicators__indicator__icon object,.e-form__indicators__indicator__icon svg{width:var(--e-form-steps-indicator-icon-size);height:auto}.e-form__indicators__indicator__icon .e-font-icon-svg{height:1em}.e-form__indicators__indicator__number{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;margin-bottom:10px}.e-form__indicators__indicator--shape-circle{border-radius:50%}.e-form__indicators__indicator--shape-square{border-radius:0}.e-form__indicators__indicator--shape-rounded{border-radius:5px}.e-form__indicators__indicator--shape-none{border:0}.e-form__indicators__indicator__label{text-align:center}.e-form__indicators__indicator__separator{width:100%;height:var(--e-form-steps-divider-width);background-color:#c2cbd2}.e-form__indicators--type-icon,.e-form__indicators--type-icon_text,.e-form__indicators--type-number,.e-form__indicators--type-number_text{align-items:flex-start}.e-form__indicators--type-icon .e-form__indicators__indicator__separator,.e-form__indicators--type-icon_text .e-form__indicators__indicator__separator,.e-form__indicators--type-number .e-form__indicators__indicator__separator,.e-form__indicators--type-number_text .e-form__indicators__indicator__separator{margin-top:calc(var(--e-form-steps-indicator-padding, 30px) \/ 2 - var(--e-form-steps-divider-width, 1px) \/ 2)}.elementor-field-type-hidden{display:none}.elementor-field-type-html{display:inline-block}.elementor-login .elementor-lost-password,.elementor-login .elementor-remember-me{font-size:.85em}.elementor-field-type-recaptcha_v3 .elementor-field-label{display:none}.elementor-field-type-recaptcha_v3 .grecaptcha-badge{z-index:1}.elementor-button .elementor-form-spinner{order:3}.elementor-form .elementor-button>span{display:flex;justify-content:center;align-items:center}.elementor-form .elementor-button .elementor-button-text{white-space:normal;flex-grow:0}.elementor-form .elementor-button svg{height:auto}.elementor-form .elementor-button .e-font-icon-svg{height:1em}.elementor-select-wrapper .select-caret-down-wrapper{position:absolute;top:50%;transform:translateY(-50%);inset-inline-end:10px;pointer-events:none;font-size:11px}.elementor-select-wrapper .select-caret-down-wrapper svg{display:unset;width:1em;aspect-ratio:unset;fill:currentColor}.elementor-select-wrapper .select-caret-down-wrapper i{font-size:19px;line-height:2}.elementor-select-wrapper.remove-before:before{content:\"\"!important}<\/style>\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"40358\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"411982d3\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-0fe90d1 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"0fe90d1\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a39714e ot-flex-column-vertical\" data-id=\"a39714e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f3cfd30 elementor-widget elementor-widget-text-editor\" data-id=\"f3cfd30\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/user-reports\/locked-out-users\/\">Check the Active Directory Locked Out Users Report<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b35e175 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b35e175\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4729a9a ot-flex-column-vertical\" data-id=\"4729a9a\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5687057 elementor-widget elementor-widget-heading\" data-id=\"5687057\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">5. (Option 1 of 2) Protect all Admin Accounts with Multi-factor Authentication via Role Settings<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-90d4e06 elementor-widget elementor-widget-text-editor\" data-id=\"90d4e06\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Organizations reduce it further by enabling <a href=\"https:\/\/infrasos.com\/how-to-enable-mfa-multi-factor-authentication-for-users\/\">multi-factor<\/a> authentication (<a href=\"https:\/\/infrasos.com\/how-to-enable-mfa-multi-factor-authentication-for-users\/\">MFA<\/a>). When MFA is turned on for admin accounts, an intruder requires additional authentication to sign in.<\/p><p>This additional security layer reduces the &#8220;attack surface&#8221; of this all-important role.\u00a0<\/p><p>Turn on MFA from role settings or by enabling Conditional Access.\u00a0<\/p><p>To turn on MFA from role settings, sign in to the Azure portal , open the Azure AD Privileged Identity Management. Click &#8220;Azure AD roles -&gt; Roles.&#8221;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d1e3e01 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d1e3e01\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-03f91cc ot-flex-column-vertical\" data-id=\"03f91cc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6bdf0eb elementor-widget elementor-widget-image\" data-id=\"6bdf0eb\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"turn on Azure AD MFA from role settings\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjQwOTMwIiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMDVcL3R1cm4tb24tQXp1cmUtQUQtTUZBLWZyb20tcm9sZS1zZXR0aW5ncy5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"490\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-768x490.jpg\" class=\"attachment-medium_large size-medium_large wp-image-40930\" alt=\"turn on Azure AD MFA from role settings\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-768x490.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-300x191.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-1024x653.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-720x459.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings.jpg 1446w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-95f0a09 elementor-widget elementor-widget-image\" data-id=\"95f0a09\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-2.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure AD Role-Based Access Control Best Practices - turn on Azure AD MFA from role settings step 2\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDA5NDMsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9BenVyZS1BRC1Sb2xlLUJhc2VkLUFjY2Vzcy1Db250cm9sLUJlc3QtUHJhY3RpY2VzLXR1cm4tb24tQXp1cmUtQUQtTUZBLWZyb20tcm9sZS1zZXR0aW5ncy1zdGVwLTIuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"488\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-2-768x488.jpg\" class=\"attachment-medium_large size-medium_large wp-image-40943\" alt=\"Azure AD Role-Based Access Control Best Practices - turn on Azure AD MFA from role settings step 2\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-2-768x488.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-2-300x191.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-2-1024x651.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-2-720x458.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-2.jpg 1439w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc2bbb9 elementor-widget elementor-widget-text-editor\" data-id=\"fc2bbb9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The &#8220;Roles&#8221; page displays a list of Azure built-in and Custom roles. Select the admin role you want to enable MFA.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e40eb0b ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e40eb0b\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e1513e4 ot-flex-column-vertical\" data-id=\"e1513e4\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ef90cc6 elementor-widget elementor-widget-image\" data-id=\"ef90cc6\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-step-3.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"turn on MFA from role settings step 3\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDA5NjIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC90dXJuLW9uLUF6dXJlLUFELU1GQS1mcm9tLXJvbGUtc2V0dGluZ3Mtc3RlcC0zLmpwZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"495\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-step-3-768x495.jpg\" class=\"attachment-medium_large size-medium_large wp-image-40962\" alt=\"turn on MFA from role settings step 3\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-step-3-768x495.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-step-3-300x193.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-step-3-1024x659.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-step-3-720x464.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-from-role-settings-step-3.jpg 1438w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-627eb81 elementor-widget elementor-widget-text-editor\" data-id=\"627eb81\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>On the roles page, click &#8220;Role settings.&#8221;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-75a49cd ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"75a49cd\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6577394 ot-flex-column-vertical\" data-id=\"6577394\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4960fc2 elementor-widget elementor-widget-image\" data-id=\"4960fc2\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-4.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure AD Role-Based Access Control Best Practices - turn on Azure AD MFA from role settings step 4\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDA5NjksInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9BenVyZS1BRC1Sb2xlLUJhc2VkLUFjY2Vzcy1Db250cm9sLUJlc3QtUHJhY3RpY2VzLXR1cm4tb24tQXp1cmUtQUQtTUZBLWZyb20tcm9sZS1zZXR0aW5ncy1zdGVwLTQuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"484\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-4-768x484.jpg\" class=\"attachment-medium_large size-medium_large wp-image-40969\" alt=\"Azure AD Role-Based Access Control Best Practices - turn on Azure AD MFA from role settings step 4\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-4-768x484.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-4-300x189.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-4-1024x646.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-4-720x454.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-4.jpg 1451w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b2f56c1 elementor-widget elementor-widget-text-editor\" data-id=\"b2f56c1\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>View the &#8220;Require Azure Multi-Factor Authentication status on active assignment.&#8221; status.\u00a0<\/p><p>Next, click the edit button to turn on MFA for identities assigned to this role. Finally, select &#8220;Azure MFA,&#8221; and click the <strong>Update<\/strong>.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-eaa303c ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"eaa303c\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b9beb4a ot-flex-column-vertical\" data-id=\"b9beb4a\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7be8d07 elementor-widget elementor-widget-image\" data-id=\"7be8d07\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-6.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"turn on MFA from role settings step 6\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDA5ODIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9BenVyZS1BRC1Sb2xlLUJhc2VkLUFjY2Vzcy1Db250cm9sLUJlc3QtUHJhY3RpY2VzLXR1cm4tb24tQXp1cmUtQUQtTUZBLWZyb20tcm9sZS1zZXR0aW5ncy1zdGVwLTYuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"488\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-6-768x488.jpg\" class=\"attachment-medium_large size-medium_large wp-image-40982\" alt=\"turn on MFA from role settings step 6\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-6-768x488.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-6-300x190.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-6-1024x650.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-6-720x457.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-turn-on-Azure-AD-MFA-from-role-settings-step-6.jpg 1441w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-50de2ab elementor-widget elementor-widget-text-editor\" data-id=\"50de2ab\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/azure-ad-identity-protection-detect-respond-to-identity-threats\/\">Azure AD Identity Protection: Detect &amp; Respond to Identity Threats<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ee4524b elementor-widget elementor-widget-heading\" data-id=\"ee4524b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">5. (Option 2 of 2) Protect all Admin Accounts with Multi-factor Authentication via Conditional Access Policy<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7147fe5 elementor-widget elementor-widget-text-editor\" data-id=\"7147fe5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Well, Azure AD offers a better option via its <a href=\"https:\/\/infrasos.com\/using-conditional-access-policies-to-enhance-office-365-security\/\">Conditional Access<\/a> policy feature.\u00a0<\/p><p>To enable MFA for admin accounts via Conditional Access Policy, open the tool in the Azure portal. Then, click &#8220;+ Create new policy.&#8221;<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9e81ba2 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9e81ba2\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e0d0718 ot-flex-column-vertical\" data-id=\"e0d0718\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-451831d elementor-widget elementor-widget-image\" data-id=\"451831d\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/reate-a-Conditional-Access-policy-and-enable-MFA-step-1-open-Conditional-Access-in-the-Azure-Portal.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Azure AD Security Best Practices for Remote Work\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6Mzk1NDIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9yZWF0ZS1hLUNvbmRpdGlvbmFsLUFjY2Vzcy1wb2xpY3ktYW5kLWVuYWJsZS1NRkEtc3RlcC0xLW9wZW4tQ29uZGl0aW9uYWwtQWNjZXNzLWluLXRoZS1BenVyZS1Qb3J0YWwuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"456\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/reate-a-Conditional-Access-policy-and-enable-MFA-step-1-open-Conditional-Access-in-the-Azure-Portal-768x456.jpg\" class=\"attachment-medium_large size-medium_large wp-image-39542\" alt=\"Azure AD Security Best Practices for Remote Work\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/reate-a-Conditional-Access-policy-and-enable-MFA-step-1-open-Conditional-Access-in-the-Azure-Portal-768x456.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/reate-a-Conditional-Access-policy-and-enable-MFA-step-1-open-Conditional-Access-in-the-Azure-Portal-300x178.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/reate-a-Conditional-Access-policy-and-enable-MFA-step-1-open-Conditional-Access-in-the-Azure-Portal-1024x608.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/reate-a-Conditional-Access-policy-and-enable-MFA-step-1-open-Conditional-Access-in-the-Azure-Portal-720x428.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/reate-a-Conditional-Access-policy-and-enable-MFA-step-1-open-Conditional-Access-in-the-Azure-Portal.jpg 1529w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5c6d6bf elementor-widget elementor-widget-text-editor\" data-id=\"5c6d6bf\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Next, give it a name on the new policy page, then click the &#8220;<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/user-reports\/enabled-users\/\">Users<\/a>&#8221; section. Click &#8220;Select users and <a href=\"https:\/\/infrasos.com\/office-365-groups-create-and-manage-groups-for-collaboration\/\">groups<\/a>&#8221; on the Include tab, then click &#8220;Directory roles.&#8221;<\/p><p>Finally, click the drop-down and check the checkboxes for all the admin roles you want to enable<a href=\"https:\/\/infrasos.com\/how-to-check-if-mfa-is-enabled-in-office-365-for-users\/\"> MFA<\/a>.\u00a0\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-00ed08b ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"00ed08b\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9532d59 ot-flex-column-vertical\" data-id=\"9532d59\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7372654 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"7372654\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-by-creating-a-Conditional-Access-policy.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"turn on Azure AD MFA by creating a Conditional Access policy\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDEwMjIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC90dXJuLW9uLUF6dXJlLUFELU1GQS1ieS1jcmVhdGluZy1hLUNvbmRpdGlvbmFsLUFjY2Vzcy1wb2xpY3kuanBnIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"486\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-by-creating-a-Conditional-Access-policy-768x486.jpg\" class=\"attachment-medium_large size-medium_large wp-image-41022\" alt=\"turn on Azure AD MFA by creating a Conditional Access policy\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-by-creating-a-Conditional-Access-policy-768x486.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-by-creating-a-Conditional-Access-policy-300x190.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-by-creating-a-Conditional-Access-policy-1024x648.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-by-creating-a-Conditional-Access-policy-720x455.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/turn-on-Azure-AD-MFA-by-creating-a-Conditional-Access-policy.jpg 1447w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bac341e elementor-widget elementor-widget-text-editor\" data-id=\"bac341e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>To enable multi-factor authentication in the policy, click &#8220;Conditions.&#8221; Select &#8220;Grant access&#8221; (default selection).\u00a0<\/p><p>Finally, check the &#8220;Require multi-factor authentication&#8221; checkbox and click\u00a0<strong>Select<\/strong>.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5e1b71d ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5e1b71d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d98ade0 ot-flex-column-vertical\" data-id=\"d98ade0\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0d9f6bc elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"0d9f6bc\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-by-creating-a-Conditional-Access-policy.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"create a Conditional Access policy\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NDEwMzIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjNcLzA1XC9BenVyZS1BRC1Sb2xlLUJhc2VkLUFjY2Vzcy1Db250cm9sLUJlc3QtUHJhY3RpY2VzLWJ5LWNyZWF0aW5nLWEtQ29uZGl0aW9uYWwtQWNjZXNzLXBvbGljeS5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"486\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-by-creating-a-Conditional-Access-policy-768x486.jpg\" class=\"attachment-medium_large size-medium_large wp-image-41032\" alt=\"create a Conditional Access policy\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-by-creating-a-Conditional-Access-policy-768x486.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-by-creating-a-Conditional-Access-policy-300x190.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-by-creating-a-Conditional-Access-policy-1024x648.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-by-creating-a-Conditional-Access-policy-720x456.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/05\/Azure-AD-Role-Based-Access-Control-Best-Practices-by-creating-a-Conditional-Access-policy.jpg 1442w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d1fa246 elementor-widget elementor-widget-text-editor\" data-id=\"d1fa246\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>After, select an option in the &#8220;Enable policy&#8221; section and click <strong>Create<\/strong>.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3744662 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3744662\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7793a66 ot-flex-column-vertical\" data-id=\"7793a66\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-aa7ad3d elementor-widget elementor-widget-text-editor\" data-id=\"aa7ad3d\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/how-to-enable-mfa-multi-factor-authentication-for-users\/\">How to Enable Office 365 MFA (Multi-Factor Authentication)<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7bb89a7 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7bb89a7\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8093cbb ot-flex-column-vertical\" data-id=\"8093cbb\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a73b26b elementor-widget elementor-widget-heading\" data-id=\"a73b26b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">6. Automatically Revoke Unnecessary Permissions with Access Reviews<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f78956 elementor-widget elementor-widget-text-editor\" data-id=\"0f78956\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Over the lifecycle of an Azure AD tenant, roles and permissions are assigned to users. As time passes, some users may retain permissions they no longer require.\u00a0<\/p><p>Considering the principle of &#8220;least privilege&#8221; best practice, organizations must develop a strategy for revoking needless admin privileges.\u00a0<\/p><p>Regularly perform administrators&#8217; account auditing or reviews.<\/p><p>For the steps to create access, visit the <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/privileged-identity-management\/pim-create-roles-and-resource-roles-review\" target=\"_blank\" rel=\"noopener\">Microsoft page<\/a>. Similarly, see the <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/governance\/create-access-review\" target=\"_blank\" rel=\"noopener\">steps<\/a> to create an audit review for Azure AD groups applications.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4bd5350 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4bd5350\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a686141 ot-flex-column-vertical\" data-id=\"a686141\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-401e9fd elementor-widget elementor-widget-heading\" data-id=\"401e9fd\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">7. Assign Roles to Groups Instead of Directly to Users<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-27ae650 elementor-widget elementor-widget-text-editor\" data-id=\"27ae650\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Some admins assign Azure AD roles directly to users. This is an incorrect way to manage <a href=\"https:\/\/infrasos.com\/office-365-identity-access-manage-user-accounts-permissions\/\">permissions<\/a>.<\/p><p>The best practice is to add users as members of a group. Then, assign roles to the group.<\/p><p>For instance, if you need to remove a role from a user&#8217;s account, remove the user from the group.<\/p><p>Another essential best practice is to assign ownership to all groups. By assigning group owners, Global admins have indirectly delegated control and management of that group to the owner.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7b8d326 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7b8d326\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c52f462 ot-flex-column-vertical\" data-id=\"c52f462\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0a721bd elementor-widget elementor-widget-text-editor\" data-id=\"0a721bd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/setup-azure-conditional-access-multi-factor-authentication-mfa\/\">Setup Azure Conditional Access + Multi Factor Authentication MFA<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2a4e5c7 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2a4e5c7\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a18c940 ot-flex-column-vertical\" data-id=\"a18c940\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-91d1138 elementor-widget elementor-widget-heading\" data-id=\"91d1138\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">8. Use \"break glass\" Accounts to Avoid Global Account Lockouts<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-25f9eaf elementor-widget elementor-widget-text-editor\" data-id=\"25f9eaf\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>This should be on top of your list of Azure AD Role-Based Access Control best practices you must implement. Imagine that your organization&#8217;s Azure AD tenant has one Global Admin, and that account is locked out.\u00a0<\/p><p>So, to avoid this negative experience, Microsoft recommends creating and using &#8220;<a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/roles\/security-emergency-access\" target=\"_blank\" rel=\"noopener\">break glass.<\/a>&#8221; or emergency access accounts.<\/p><p>In addition to having a &#8220;break glass&#8221; account, as mentioned in best practice 4, an organization&#8217;s Azure<a href=\"https:\/\/infrasos.com\/how-to-setup-and-manage-active-directory-password-policy\/\"> AD<\/a> tenant must have more than one Global Admin.<\/p><p>Implementing this best practice ensures that the business does not lose access to its Azure AD if one Global Admin is locked out.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-af278d4 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"af278d4\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-69b0157 ot-flex-column-vertical\" data-id=\"69b0157\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3d22461 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"3d22461\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">9. Be Proactive about Detecting and Responding to Identity Threats<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b6ff157 elementor-widget elementor-widget-text-editor\" data-id=\"b6ff157\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Proactively detecting and responding to<a href=\"https:\/\/infrasos.com\/azure-ad-identity-protection-detect-respond-to-identity-threats\/\"> identity threats<\/a> is an essential Azure AD Role-Based Access Control best practice. To ensure early threat detection and mitigation learn how to implement this recommended best practice. Read our article on detecting and responding to identity threats.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c548d86 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c548d86\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3a345f8 ot-flex-column-vertical\" data-id=\"3a345f8\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0bcd336 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"0bcd336\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-large\">10. Implement Privileged Identity Management (PIM) for Groups<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b125540 elementor-widget elementor-widget-text-editor\" data-id=\"b125540\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Implementing efficient Azure AD group management using <a href=\"https:\/\/infrasos.com\/azure-ad-privileged-identity-management-manage-monitor-privileged-accounts\/\">PIM<\/a> for <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/privileged-identity-management\/concept-pim-for-groups\" target=\"_blank\" rel=\"noopener\">Groups<\/a> is the last but equally important best practice. This enables Azure AD admins to activate the membership or ownership for Azure AD <a href=\"https:\/\/infrasos.com\/active-directory-security-groups-best-practices\/\">security group<\/a> or Microsoft <a href=\"https:\/\/infrasos.com\/microsoft-office-365-group-types-explained-best-practices\/\">365 group<\/a>.<\/p><p>By activating PIM for Groups, admins create policies that require approval for group membership and other requirements like<a href=\"https:\/\/infrasos.com\/how-to-enable-mfa-multi-factor-authentication-for-users\/\"> MFA<\/a>.\u00a0<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-04c539c ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"04c539c\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7c939a6 ot-flex-column-vertical\" data-id=\"7c939a6\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8336a3f elementor-widget elementor-widget-text-editor\" data-id=\"8336a3f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/azure-ad-conditional-access-implement-access-policies-controls\/\">Azure AD Conditional Access: Implement Access Policies &amp; Controls<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ecc2773 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ecc2773\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-dfbb3c3 ot-flex-column-vertical\" data-id=\"dfbb3c3\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ea2d0ab elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"ea2d0ab\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively Conclusion<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-877f53c elementor-widget elementor-widget-text-editor\" data-id=\"877f53c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>To conclude, using Azure AD <a href=\"https:\/\/infrasos.com\/azure-ad-custom-roles-create-manage-custom-roles-for-azure-ad\/\">roles<\/a> and privileges effectively is vital for a secure and well managed environment.\u00a0<\/p><p>This article emphasized using built-in Azure AD roles, applying the principle of least privilege, and implementing just-in-time access. It also highlighted the importance of protecting admin accounts with multi-factor authentication and automating access reviews.<\/p><p>Not only that, but assigning roles to groups, not individual users, is recommended. Additionally, having &#8220;break glass&#8221; accounts and proactive <a href=\"https:\/\/infrasos.com\/azure-ad-identity-protection-detect-respond-to-identity-threats\/\">threat detection<\/a> and response are crucial measures.<\/p><p>Lastly, implementing Privileged<a href=\"https:\/\/infrasos.com\/top-10-best-iam-tools-identity-access-management\/\"> Identity Management<\/a> (PIM) for groups adds control and accountability. Organizations implement these practices to ensure a robust and secure Azure AD role-based access control framework.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1a784f54 elementor-section-content-middle ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1a784f54\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-11d3579c ot-flex-column-vertical\" data-id=\"11d3579c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-30b5b664 elementor-widget elementor-widget-image\" data-id=\"30b5b664\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"113\" height=\"101\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/05\/InfraSOS-Logo-Icon-1.png\" class=\"attachment-full size-full wp-image-5788\" alt=\"InfraSOS-AD-Tools\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-614a2cf8 ot-flex-column-vertical\" data-id=\"614a2cf8\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-62875f0a elementor-widget elementor-widget-heading\" data-id=\"62875f0a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Try InfraSOS for FREE<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3625430c elementor-widget elementor-widget-text-editor\" data-id=\"3625430c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Try InfraSOS Active Directory, Azure AD &amp; Office 365 Reporting &amp; Auditing Tool<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7050f886 elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"7050f886\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"40358\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"7050f886\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-250a9d29 elementor-icon-list--layout-inline elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"250a9d29\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<link rel=\"stylesheet\" href=\"https:\/\/infrasos.com\/wp-content\/plugins\/elementor\/assets\/css\/widget-icon-list.min.css\">\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-up\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Free 15-Days Trial<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SaaS Reporting & Auditing Solution<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Full Access to All Features<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively. Are you responsible for managing Azure AD roles and seeking to develop a best practices strategy for Role-Based Access Control? To develop a best practices strategy, you must first understand the Roles and Role-Based Access Control concept in Azure [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[35],"tags":[67],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively<\/title>\n<meta name=\"description\" content=\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively. Are you responsible for managing Azure AD roles\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively\" \/>\n<meta property=\"og:description\" content=\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively. Are you responsible for managing Azure AD roles\" \/>\n<meta property=\"og:url\" content=\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\" \/>\n<meta property=\"og:site_name\" content=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infrasos\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-06-06T14:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-28T13:45:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/view-Built-in-Azure-AD-Roles-in-Azure-AD-portal-q7a8xdjb8fe3mlm8mezyyyae8rebaixpxq9tbq180e.jpg\" \/>\n<meta name=\"author\" content=\"Victor Ashiedu\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:site\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Victor Ashiedu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\"},\"author\":{\"name\":\"Victor Ashiedu\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6\"},\"headline\":\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively\",\"datePublished\":\"2023-06-06T14:00:00+00:00\",\"dateModified\":\"2023-08-28T13:45:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\"},\"wordCount\":1517,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"keywords\":[\"azure ad\"],\"articleSection\":[\"Azure AD\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\",\"url\":\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\",\"name\":\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/#website\"},\"datePublished\":\"2023-06-06T14:00:00+00:00\",\"dateModified\":\"2023-08-28T13:45:12+00:00\",\"description\":\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively. Are you responsible for managing Azure AD roles\",\"breadcrumb\":{\"@id\":\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/infrasos.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/infrasos.com\/#website\",\"url\":\"https:\/\/infrasos.com\/\",\"name\":\"Active Directory Tools, Report, Monitor &amp; Manage AD\",\"description\":\"Active Directory &amp; Office 365 SaaS Reporting Tool\",\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/infrasos.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/infrasos.com\/#organization\",\"name\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\",\"url\":\"https:\/\/infrasos.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"contentUrl\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"width\":113,\"height\":101,\"caption\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\"},\"image\":{\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/infrasos\/\",\"https:\/\/twitter.com\/infra_sos\",\"https:\/\/www.linkedin.com\/showcase\/86283876\",\"https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6\",\"name\":\"Victor Ashiedu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g\",\"caption\":\"Victor Ashiedu\"},\"description\":\"Victor is an IT pro based in Manchester, UK. With over 22 years of experience managing Windows Server, Active Directory, and Powershell, and 7 years of expertise in Azure AD and Office 365, he's a seasoned expert in his field. When he's not working, he loves spending time with his family - a wife and a 5-year-old. Victor is passionate about helping businesses succeed in today's fast-changing tech landscape.\",\"sameAs\":[\"https:\/\/www.itechguides.com\/author\/victor-ashiedu\/\",\"https:\/\/www.linkedin.com\/in\/vashiedu\/\"],\"url\":\"https:\/\/infrasos.com\/author\/ashiedu5843\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively","description":"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively. Are you responsible for managing Azure AD roles","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/","og_locale":"en_US","og_type":"article","og_title":"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively","og_description":"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively. Are you responsible for managing Azure AD roles","og_url":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/","og_site_name":"Active Directory Tools, Report, Monitor &amp; Manage AD","article_publisher":"https:\/\/www.facebook.com\/infrasos\/","article_published_time":"2023-06-06T14:00:00+00:00","article_modified_time":"2023-08-28T13:45:12+00:00","og_image":[{"url":"https:\/\/infrasos.com\/wp-content\/uploads\/elementor\/thumbs\/view-Built-in-Azure-AD-Roles-in-Azure-AD-portal-q7a8xdjb8fe3mlm8mezyyyae8rebaixpxq9tbq180e.jpg"}],"author":"Victor Ashiedu","twitter_card":"summary_large_image","twitter_creator":"@infra_sos","twitter_site":"@infra_sos","twitter_misc":{"Written by":"Victor Ashiedu","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/#article","isPartOf":{"@id":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/"},"author":{"name":"Victor Ashiedu","@id":"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6"},"headline":"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively","datePublished":"2023-06-06T14:00:00+00:00","dateModified":"2023-08-28T13:45:12+00:00","mainEntityOfPage":{"@id":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/"},"wordCount":1517,"commentCount":0,"publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"keywords":["azure ad"],"articleSection":["Azure AD"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/","url":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/","name":"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively","isPartOf":{"@id":"https:\/\/infrasos.com\/#website"},"datePublished":"2023-06-06T14:00:00+00:00","dateModified":"2023-08-28T13:45:12+00:00","description":"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively. Are you responsible for managing Azure AD roles","breadcrumb":{"@id":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/infrasos.com\/azure-ad-role-based-access-control-best-practices-how-to-use-azure-ad-roles-and-privileges-effectively\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/infrasos.com\/"},{"@type":"ListItem","position":2,"name":"Azure AD Role-Based Access Control Best Practices: How to Use Azure AD Roles and Privileges Effectively"}]},{"@type":"WebSite","@id":"https:\/\/infrasos.com\/#website","url":"https:\/\/infrasos.com\/","name":"Active Directory Tools, Report, Monitor &amp; Manage AD","description":"Active Directory &amp; Office 365 SaaS Reporting Tool","publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/infrasos.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/infrasos.com\/#organization","name":"InfraSOS - Active Directory & Office 365 Reporting Tools","url":"https:\/\/infrasos.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/","url":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","contentUrl":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","width":113,"height":101,"caption":"InfraSOS - Active Directory & Office 365 Reporting Tools"},"image":{"@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infrasos\/","https:\/\/twitter.com\/infra_sos","https:\/\/www.linkedin.com\/showcase\/86283876","https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg"]},{"@type":"Person","@id":"https:\/\/infrasos.com\/#\/schema\/person\/c5852885fec0cfbb47020b1f44622ac6","name":"Victor Ashiedu","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8e12582b91f392f24c2b96a724da012a?s=96&d=mm&r=g","caption":"Victor Ashiedu"},"description":"Victor is an IT pro based in Manchester, UK. With over 22 years of experience managing Windows Server, Active Directory, and Powershell, and 7 years of expertise in Azure AD and Office 365, he's a seasoned expert in his field. When he's not working, he loves spending time with his family - a wife and a 5-year-old. Victor is passionate about helping businesses succeed in today's fast-changing tech landscape.","sameAs":["https:\/\/www.itechguides.com\/author\/victor-ashiedu\/","https:\/\/www.linkedin.com\/in\/vashiedu\/"],"url":"https:\/\/infrasos.com\/author\/ashiedu5843\/"}]}},"_links":{"self":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/40358"}],"collection":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/comments?post=40358"}],"version-history":[{"count":667,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/40358\/revisions"}],"predecessor-version":[{"id":52703,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/40358\/revisions\/52703"}],"wp:attachment":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/media?parent=40358"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/categories?post=40358"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/tags?post=40358"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}