Trascritto
Microsoft Entra Permissions Management - Simply Explained
16 lug 2026 ·
13 min. 58 sec.
Scarica e ascolta ovunque
Scarica i tuoi episodi preferiti e goditi l'ascolto, ovunque tu sia! Iscriviti o accedi ora per ascoltare offline.
Microsoft Entra Permissions Management - Simply Explained
Descrizione
Over time, users, service principals and scripts pile up cloud permissions nobody remembers granting, and attackers love that. This episode explains Microsoft Entra Permissions Management in plain English for cloud...
mostra di più
Over time, users, service principals and scripts pile up cloud permissions nobody remembers granting, and attackers love that. This episode explains Microsoft Entra Permissions Management in plain English for cloud and security admins running Azure, AWS or GCP. You will learn how it discovers, right-sizes and monitors permissions and how it differs from PIM.
In this episode
Key takeaways
Worth quoting
“Most people think managing permissions is about assigning roles. You give someone, contributor or owner, and you're done. But that's not the real problem. The real problem is losing track of who has too much power.” – Mirko Peters (00:41)
“Then it watches what those identities actually do, not what they can do. That gap between granted permissions and used permissions is where the risk lives.” – Mirko Peters (03:10)
Explore more on M365.FM
Follow and rate M365.FM in your podcast app, and join the free M365 community at m365con.net.
Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-microsoft-365-azure-cloud-power-platform-ai--6704921/support.
mostra meno
In this episode
- 00:00 – Introduction and the permission problem
- 01:09 – Why the old way is broken
- 02:30 – What Entra Permissions Management is
- 03:48 – Discover, remediate, monitor across clouds
- 06:14 – The Permission Creep Index
- 07:49 – Permissions on demand
- 09:20 – Permissions Management versus PIM
- 11:16 – Getting started safely
Key takeaways
- Permission creep happens when identities keep permissions long after projects end, and Entra Permissions Management reveals the gap between granted and actually used permissions across Azure, AWS and GCP.
- The Permission Creep Index gives each identity a measurable risk score, and permissions on demand replaces just-in-case rights with time-limited, scoped access.
- PIM controls when privileged roles are active while Permissions Management controls what permissions exist; start with a pilot subscription, the free trial and simulation mode.
Worth quoting
“Most people think managing permissions is about assigning roles. You give someone, contributor or owner, and you're done. But that's not the real problem. The real problem is losing track of who has too much power.” – Mirko Peters (00:41)
“Then it watches what those identities actually do, not what they can do. That gap between granted permissions and used permissions is where the risk lives.” – Mirko Peters (03:10)
Explore more on M365.FM
- Episode page: the full episode with chapters, key quotes and FAQ on permission creep
- Microsoft Azure – one of the three clouds Permissions Management scans for unused permissions, alongside AWS and GCP
- Microsoft Entra – the product family that both Permissions Management and PIM belong to
- Mirko Peters – host of Microsoft Knowledge Nuggets, explaining Entra Permissions Management in plain English
- Related episode: Azure Role-Based Access Control (RBAC) - Simply Explained
Follow and rate M365.FM in your podcast app, and join the free M365 community at m365con.net.
Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-microsoft-365-azure-cloud-power-platform-ai--6704921/support.
Informazioni
| Autore | Mirko Peters M365, Azure & AI |
| Organizzazione | m365 FM |
| Sito | www.m365.fm |
| Tag |
Copyright 2026 - Spreaker Inc. an iHeartMedia Company
Commenti