Evidence search
Search
Search titles, summaries, topics, providers, authors, and the full open-access corpus.
Results for “restricted management administrative units”
2 publicationsTechnical guideSource-based analysisTechnical guideSource-based analysis
Tier Entra administrator roles by the control they can take
Microsoft's own password reset and sensitive action tables show which Entra roles can take over which accounts. Use them, plus the non-role paths, to set three tiers, assignment rules and the controls that keep lower tiers out.
Identity & access · Microsoft Entra / Microsoft Graph · By Cloud Security DeskDefend cloud admin accounts against help desk social engineering
Attackers who talk a help desk into resetting MFA inherit every cloud console behind single sign-on. Verify callers properly, shrink what a reset hands over, and alert on the events it leaves.
Detection & response · Microsoft Entra / Okta / Amazon Web Services / CISA / Mandiant · By Cloud Security Desk