Chapter 5: Azure AD Identity Governance

Privileged identities are attractive to attackers because they can be used to gain broad access to an environment, often resulting in a significant business impact. Identity governance ensures that the risk to an organization is reduced even if a user account is compromised. To achieve this, processes need to be in place to ensure that privileged access is granted to the right people only for the duration that it is needed and removed when that duration expires. This way, the chances of an adversary gaining privileged access that could be used to cause significant damage are reduced.

This chapter will equip you with an understanding of how to implement the principles of identity governance using two features of Azure AD Premium P2 – Azure AD Privileged Identity Management (PIM) and Access Review.

Here are the topics that we will cover in this chapter with accompanying hands-on exercises:

• Protecting privileged access using...