I know MANY of you have been waiting for this: You can now assign groups to roles in #AzureAD. Big win for automating role management at scale! techcommunity.microsoft.com/t5/azure-activ…

Today's news: We're currently rolling out Conditional Access and Identity Protection for Azure AD B2C while also continuing to simplify and align Azure AD pricing. techcommunity.microsoft.com/t5/azure-activ…

Super fun to get some of the original Directory Expert's Conference players back together for a look backward at DEC (including the origins of the annual Wook Lee Memorial Challenge) and forward to HIP next week! #activedirectory #sysadmin #hip2020

Slowly #AzureAD RBAC gets better and better. Good to finally see improvement here. Thanks Abhijeet Sinha Stuart Kwan 👏

More new built-in roles for delegating admin in #azuread

Stay tuned for some pretty cool Microsoft Entra ID (Azure AD) news coming out of #MSIgnite in the next few days! Make sure to check out these sessions (for free!): techcommunity.microsoft.com/t5/azure-activ…

Introducing Attribute Based Access Control in Azure! First stop, ABAC for Azure Storage. techcommunity.microsoft.com/t5/azure-activ…

Assigning Azure AD roles to cloud groups is generally available now. isAssignableToRole attribute on group object is in Graph v1.0 and latest version of AzureAD PowerShell. Seemingly simple, but amazingly complex to build. But finally... docs.microsoft.com/en-us/azure/ac… Stuart Kwan

I'm hiring! A Principal Program Manager to lead a team defining consistent Role Based Access Control across the Microsoft cloud. It's a people management position. careers.microsoft.com/us/en/job/1117…

The tech area in which I work is in the background for most people. So I want to salute the groundbreaking work of my colleagues, which was "featured" on The Tonight Show. When late night is making fun of you, you know you're important!

New preview today of custom security attributes in #AzureAD! Use them in Attribute Based Access Control to simplify access to #AzureBlob, for example "grant read access if user.project == blob.project". More scenarios coming soon! techcommunity.microsoft.com/t5/azure-activ…

Kim was a transcendent figure in Identity. He literally changed the rules. I learned so much from him about technology and business, but also about humanity. I find myself learning from him to this day even without his being present. It is a shock to hear about his passing.

Today's news: Azure AD now supports custom RBAC roles for devices scoped to Admin Units. Awesome new way to assure least privileges for devices! techcommunity.microsoft.com/t5/azure-activ…

Dynamic membership for #AzureAd Admin Units now in preview! techcommunity.microsoft.com/t5/azure-activ…

You can now download all #AzureAD RBAC assignments using a button in the portal, instead of having to script this with PowerShell docs.microsoft.com/en-us/azure/ac…

Happy World Password Day!

I’m over the moon to help launch Microsoft Entra, our new family of Identity and Access solutions that includes Azure AD, Entra Permissions Management (previously CloudKnox), Entra Verified ID and a new simplified admin portal experience microsoft.com/security/blog/…

Today's news: Now you can use Azure AD cloud based groups to manage access in your on-premises Windows Server AD! techcommunity.microsoft.com/t5/microsoft-e…

🎉 Microsoft Entra Permissions Management is now generally available! Remediate permission risks and ensure the security of your multicloud environment. Learn more: msft.it/6016bIZ1w #MicrosoftEntra

Azure identity geeks: You can now view in the Azure portal the set of resources that are associated with a user-assigned managed identity, like which VMs are using the identity: docs.microsoft.com/en-us/azure/ac…