Foreign principals and their pitfalls with IAM role assignment
Problem Owners of a resource in Azure can’t delete the role assignment of an invited guest user, which is a member of the Foreign Principal group in the Identity and…
Posts by Michele Blum
Manage subscriptions and resources as a Microsoft CSP
Introduction to Microsoft CSP The Cloud Solution Provider Program (CSP) is a program developed by Microsoft for providers of cloud-based solutions. It offers a simple way to market Microsoft cloud…
How to migrate classic co-administrator roles to RBAC
Introduction Some of you already have seen the message in access control (IAM) blade: Classic admins will be retired on August 31, 2024. Starting on April 3, you won’t be…
How to migrate legacy authentication policy settings
Introduction Some of you already have seen the message in the authentication methods menu: On September 30th, 2025, the legacy multifactor authentication and self-service password reset policies will be deprecated…
Azure Update Manager: WSUS in the Cloud
Introduction In an on-premise environment you have your WSUS Server, which manages and governs all updates for your machines (server and clients). Since Microsoft is shifting its portfolio to the…
Secure your Microsoft 365 access with hardware tokens
Introduction In the past few months, I was involved in several Azure Identity & Access Security projects. All of them had something in common, rolling out multifactor authentication. 90% of…
Microsoft 365 Backup Preview
Introduction Microsoft 365 Backup is an in-place backup solution of Microsoft. For the Microsoft 365 Backup, there is no additional software or 3rd party tool needed. Microsoft is brining a…
Secure your access to AVD with hardware tokens
Introduction If your users are unable to use their phones (neither private nor company) or have a non-personal account for accessing the Microsoft 365 Portal or AVD, this might raise…
How to Convert Entra ID Connect Synchronized Users To Cloud Managed Identities
Once you’ve transferred all your workloads to Azure, you still need to manage your synced identities. To completely migrate them to the cloud and manage them entirely within Azure, simply…
MS Cloud for IT Pro Zentralschweiz 24.01.2024
Last Wednesday, we had the privilege of attending the community event MS Cloud for IT Pro Zentralschweiz. This event, hosted and initiated by Joker IT AG and sponsored by TD…