Protecting privileged access using Azure AD Privileged Identity Management (PIM)
A privileged identity has administrative permissions for our Azure environments. These identities have more permissions for our Azure environments than a typical user. They are usually limited to a small number of users, which may include IT administrators or business users responsible for managing a line of business applications.
As you can imagine, these identities are high-value targets for attackers because of the level of access that is granted to them. If we fail to protect privileged access, an attacker that compromises a privileged user's identity could take advantage of the user's permissions to move laterally within our environments.
When thinking about protecting privileged access, here are some principles that we may want to adopt. Comprehensive privileged identity protection requires the following:
- Access should only be granted to people that require it.
- Access...
