CyberCode Academy

Course 29 - AZ-500 Microsoft Azure Security Technologies | Episode 3: Mastering Azure Identity and Access Management

Listen Later
In this lesson, you’ll learn about managing identity and access in Microsoft Azure, aligned with the AZ-500 certification, with a strong focus on security and privileged access control:Azure Active Directory Identity Protection
  • Detecting and responding to risky sign-ins and accounts, such as:
    • Logins from anonymous IPs (e.g., via Tor)
    • Unusual behavior or leaked credentials
  • Identifying vulnerabilities like:
    • Users without Multi-Factor Authentication (MFA)
    • Weak or exposed credentials
  • Using automated policies to:
    • Trigger alerts
    • Enforce remediation (e.g., force password reset or MFA)
Tenants, Subscriptions, and Roles
  • Understanding structure:
    • Azure AD Tenant → Identity layer
    • Azure Subscription → Resource management layer
  • Differentiating roles:
    • Azure AD roles → Manage users, groups, identities
    • Azure RBAC roles → Manage cloud resources
  • Core RBAC roles:
    • Owner → Full control
    • Contributor → Modify resources (no access control)
    • Reader → View-only access
  • Assigning roles to:
    • Users
    • Groups
    • Service principals
Privileged Identity Management (PIM)
  • Using Azure AD Privileged Identity Management (PIM) to reduce risk from privileged accounts
  • Key concepts:
    • Just-In-Time (JIT) access → No permanent admin rights
    • Time-bound activation → Roles expire automatically
    • Approval workflows → Require authorization before elevation
    • MFA enforcement for sensitive roles
  • Governance features:
    • Access reviews to validate ongoing need for permissions
    • Auditing and tracking privileged activity
Practical Security Scenarios
  • Simulating risky behavior (e.g., Tor login) to trigger alerts
  • Enforcing Conditional Access + PIM together for layered security
  • Managing identities using least privilege principles
Exam Preparation Focus (AZ-500)
  • Choosing cost-effective identity protection solutions
  • Understanding hybrid identity (e.g., Azure AD Connect basics)
  • Combining:
    • Conditional Access
    • Identity Protection
    • PIM
Key Takeaways
  • Identity is the primary security boundary in cloud environments
  • Privileged access must be:
    • Temporary
    • Audited
    • Strictly controlled
  • Combining detection (Identity Protection) with control (PIM + RBAC) provides strong defense against account compromise
This lesson marks a major milestone, building the foundation for becoming an Azure Security Engineer with a focus on identity-first security.

You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
...more
View all episodesView all episodes
Download on the App Store
CyberCode AcademyBy CyberCode Academy