Designing an IAM Strategy for your Engineering Platform
summary
Design maps a product + role to an Entra ID Access Package that adds users to intent-named groups, which are used in target systems (Azure subscriptions, Azure DevOps, app roles); high‑privilege roles use Privileged Identity Management with eligible role assignments and MFA and opt‑in activation. Requires Entra ID P2 (and governance for direct Entra role management). Demoable flows let new engineers request access and be productive in minutes; limitations include no group owners on app registrations and access reviews applying only at review window end.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 3:56Identity access challenges
- 11:38IAM design requirements
- 14:31Microsoft Entra ID features
- 19:02Privileged Identity Management demo
- 28:49Access Packages demo
- 34:10IAM solution structure
- 45:20Implementation results
related talks
38mDesigning an IAM Strategy for your Engineering Platform
53mSurprising ways to escalate privileges in Entra ID
45mSecure your Intelligent Applications with Microsoft Entra
12mIAM and Privileged Access Foundations for Secure ML Platforms
34mScaling access with AWS IAM Identity Center, feat.
32mEntra ID PIM Activation ... but better - With JAz.PIM
20mExplore CIAM capabilities with External Identities in Microsoft Entra
35mIdentity and Access Management for the Decade Ahead