Tag: Microsoft Entra

Every Conditional Access policy that targets “Select resources” starts life with a tidy list of three apps. Two years later it has forty, nobody knows why the HR app is in there, and the new payroll system isn’t. You know the one. The Conditional Access filter for applications fixes that. Instead of adding apps to […]

Entra license usage report tested: how it counts P1 and P2 usage, guest users and the 50,000 figure, plus a PowerShell check against your sign-in logs.

PIM for Groups nesting tested: a group as an eligible member of a role-assignable group, what one activation gives, and what it doesn’t.

How to set up Microsoft Remote Help with Intune: July 2026 licensing, a least-privilege helper role, Enterprise App Catalog deployment with auto-update, elevation and session logs.

My SC-300 exam study guide: exam facts, skills measured with weightings, the 28 October 2026 update, memory tips and scenario examples, plus how I renewed my Identity and Access Administrator certification.

A practical Microsoft Entra PIM guide: eligible vs active roles, role settings, Conditional Access authentication context on activation, approvals, PIM for Groups and access reviews.

Assign Microsoft Entra roles to a role-assignable group, then use PIM for Groups to make admins eligible members with MFA, approval and access reviews.

How to use restricted management administrative units in Microsoft Entra ID to protect executive, HR and break glass accounts, with PowerShell and audit checks.

A break glass account gets you back in when Conditional Access locks everyone out. Here is how to set one up properly in 2026, with passkeys, alerts and regular testing.