Configuring Access Control

In this chapter, the journey of securing virtual desktops continues, with topics such as how to control access to virtual desktops with Role-Based Access Control (RBAC). You will learn how to connect to session hosts in a secure way with Azure Bastion. You will also learn how to use Just in Time (JIT) access in combination with Azure Bastion so that IT admins can connect in a secure way. Furthermore, we will talk about how to secure access control with the use of Azure Privileged Identity Management (PIM). We will finish the chapter with a look at how Windows Local Administrator Password Solution (LAPS) can help you manage local admin passwords for your devices. We will explain why it’s so important that the zero-trust principle is applied. All the security features covered in this chapter will further strengthen the security of your environment.

These topics are generally very broad but will be limited in scope for the purpose of this book. Most...