en da da da nb da da da es da en de en da da da en en en en en en en en en en en en en en en en en en da da da es en da da da en da da da da en da es en da da da en da da da da en
Azure AD roles Discovery and insights (preview) in Privileged Identity Management former Security Wizard - Azure Active Directory - Microsoft Entra | Microsoft Learn
Denne browser understøttes ikke længere.
Opgrader til Microsoft Edge for at drage fordel af de nyeste funktioner, sikkerhedsopdateringer og teknisk support.
Download Microsoft Edge Flere oplysninger om Internet Explorer og Microsoft Edge
Indholdsfortegnelse Læs på engelsk Gem Feedback Rediger Udskriv
Twitter LinkedIn Facebook Mail
Discovery and Insights (preview) for Azure AD roles (formerly Security Wizard)
2 minutter til læsning
If you're starting out using Privileged Identity Management (PIM) in Azure Active Directory (Azure AD), part of Microsoft Entra, to manage role assignments in your organization, you can use te Discovery and insights (preview) page to get started. This feature shows you who is assigned to privileged roles in your organization and how to use PIM to quickly change permanent role assignments into just-in-time assignments. You can view or make changes to your permanent privileged role assignments in Discovery and Insights (preview). It's an analysis tool and an action tool.
Discovery and insights (preview)
Before your organization starts using Privileged Identity Management, all role assignments are permanent. Users are always in their assigned roles even when they don't need their privileges. Discovery and insights (preview), which replaces te former Security Wizard, shows you a list of privileged roles and how many users are currently in those roles. You can list out assignments for a role to learn more about te assigned users if one or more of them are unfamiliar.
✔️ Microsoft recommends that you keep two break glass accounts that are permanently assigned to te global administrator role. Make sure that these accounts don't require te same multi-factor authentication mechanism as your normal administrative accounts to sign in, as described in Manage emergency access accounts in Azure AD.
Also, keep role assignments permanent if a user has a Microsoft account (in other words, an account they use to sign in to Microsoft services like Skype, or Outlook.com). If you require multi-factor authentication for a user with a Microsoft account to activate a role assignment, te user will be locked out.
Open Discovery and insights (preview)
Sign in to te Azure portal.
Open Azure AD Privileged Identity Management.
From te left menu, select Azure AD roles and then select Discovery and insights (Preview). Opening te page begins te discovery process to find relevant role assignments.
Select Reduce global administrators.
Review te list of Global Administrator role assignments.
Select Next to select te users or groups you want to make eligible, and then select Make eligible or Remove assignment.
You can also require all global administrators to review their own access.
After you select any of these changes, you'll see an Azure notification.
You can then select Eliminate standing access or Review service principals to repeat te above steps on other privileged roles and on service principal role assignments. For service principal role assignments, you can only remove role assignments.
Assign Azure AD roles in Privileged Identity Management
Indsend og få vist feedback om
Dette produkt Denne side
Få vist feedback på hele siden
Beskyttelse af personlige oplysninger & Cookies
Beskyttelse af personlige oplysninger & Cookies