Describe access management capabilities of Microsoft Entra ID

Question 1

Describe Conditional Access

Answer 1

It is a feature of Microsoft Entra ID that provides an extra layer of security before allowing authenticated users to access data or other assets.

Question 2

Describe a Conditional Access Policy

Answer 2

It uses analysis signals including user, location, device, application, and risk to automate decisions for authorization access to resources.

They are enforced after first-factor authentications.

It consists of two components, assignments and access controls.

Assignment- controls the who, what, where, and when of the Condition Access Policy. All assignments are logically ANDed.

Access controls - decides how a policy will be enforced, whether to block access, grant access with extra verification, or apply a session control to enable a limited experience.

Question 3

Define role-based access controls (RBAC).

Answer 3

It is managing access using roles.

Microsoft Entra built-in and custom roles are a form of RBAC in that MEID roles control access to Microsoft Entra resources. This is referred to as Microsoft Entra RBAC.

Question 4

Describe Built-in roles

Answer 4

MEID includes many built-in roles, which are roles with a fixed set of permissions. Like:

-Global Administrator: users with this role have access to all admin features. The person who signs in as a tenant automatically gets this role.
-User Administrator: users with this role can create and manage all aspects of users and groups, support tickets, and monitor service health.
-Billing administrator: users with this role make purchases, manage subscriptions and support tickets, and monitor service health.

Question 5

Describe custom roles

Answer 5

is a collection of permissions that you choose from a preset list.

Step 1. Creating a custom role from a preset list. Step 2 you assign it to a group.