Did you know that if you delete an Entra ID security group, it will still remain under resources in an Access Package in Entra ID Governance? Well, now you know it does. This can lead to delivery of access packages being partially delivered when a user gets an access package assigned. This is something that…
When you offboard users and ultimately delete their user accounts, something that can easily be forgotten is that the user may be an approver in an access package in Entra ID Governance. What happens is when you delete the user in Entra ID (via AD Connect sync or otherwise), the user will still be present…
The other day I was working on a change with a colleague where one Entra ID security group needed to be replaced with another security group in an in-house application. I was asked to make sure the same members of the old group were added to the new group, and that’s a fairly simple task…
If you have been working with Entra ID, you’ve probably figured out that managing on-premises active directory security groups (AD groups) might be one of the biggest “how to?” questions when planning to use this cloud-based identity solution. As you might know, AD groups can only be managed from your domain controllers (or servers with…
The last couple of weeks, I have been working with Microsoft’s new service called Global Secure Access (GSA), which is positioned as a replacement for your traditional VPN, whether it be split tunnel or force tunnel. You can read more about it here – What is Global Secure Access?, as I won’t go into much…
In my blog post a few weeks ago about creating an access package in Entra ID Governance with PowerShell, I wrote about how you can programmatically create access packages with PowerShell and create templates to make it easier to create access packages in the future. In this blog post, I want to share how you…
Access packages in Entra ID Governance are a great way to bundle resources together and then provide a user or multiple users access to these resources or access to resources via security groups. But what happens when a user gets removed from a security group that is part of an access package? The answer to…
A few days ago, I received a ticket regarding three users from the same department who were missing access to an application. I knew this application was assigned to them through an access package. Since all three were new users, I wondered what had happened when the access package was assigned. The first thing I…
In my previous blog post regarding A way to handle distribution lists with Entra ID Governance, I described the process of creating an access package for each department and office location within my company. These access packages were utilized to manage memberships of Exchange Online distribution lists, as well as security groups in Entra ID…
If you have been working with Entra ID Governance, you probably figured out that there is no native way of working with Exchange Online (or On-premises Exchange) resources. So, you will have to get creative in how to manage members of distribution lists memberships at a scale in Entra ID Governance. In this blog post…
