identity management

I recently encountered a tedious workflow where repeatedly navigating the Azure Portal to copy-paste tenant IDs disrupted my productivity, prompting me to clarify the often-confused differences between Tenant, Subscription, and Directory IDs. To streamline this process, I decided to build a custom lookup tool using Azure Functions, offering a faster alternative to manual portal navigation for retrieving these critical identifiers.

I discovered the hard way that standard Azure IAM features cannot block inherited permissions at the Resource Group level, making it impossible to restrict access for specific users without revoking their rights across the entire subscription. In this post, I share the trial-and-error process of finding a workaround to lock down confidential resource groups while maintaining broader access, ultimately revealing why common solutions like deny assignments or Blueprints fall short.

If you’re planning to attend ESPC '23 in Amsterdam, you’ll want to join me for two sessions that blend practical AI integration with robust security strategies. I’ll be sharing hands-on guidance for leveraging Azure OpenAI Services and demonstrating how to secure your infrastructure using Zero Trust principles and Microsoft Entra Global Secure Access.

If you are curious about the journey behind my 11th year as a Microsoft MVP, this post shares my excitement over my recent renewal and transition to a dual role in Security Copilot and Identity & Access. I reflect on my evolution from SharePoint to Azure and express my gratitude for the community's support as I embark on what promises to be a hectic and rewarding year ahead.

If you are curious about the practical trade-offs of switching from a long-term, self-hosted password manager to a modern commercial solution, this post details my decade-long journey with KeePass. I explain why the tool’s lack of seamless sharing and modern authentication features like Windows Hello finally pushed me to migrate to 1Password, despite the strong attachment I had built to my free, local database over the years.