https://gotoguy.blog/categories/azure-ad-privileged-identity-management/Azure AD Privileged Identity Management - Category - GoToGuy BlogHugo -- gohugo.ioen-usFri, 22 Nov 2019 12:00:58 +0000https://gotoguy.blog/2019/11/22/how-to-use-azure-ad-privileged-identity-management-powershell-and-graph-api/Fri, 22 Nov 2019 12:00:58 +0000Jan Vidar Elvenhttps://gotoguy.blog/2019/11/22/how-to-use-azure-ad-privileged-identity-management-powershell-and-graph-api/A while back I wrote a blog post on how you could download, install and use a separate Azure AD PIM PowerShell Module for managing Privileged Roles, https://gotoguy.blog/2018/05/22/getting-started-with-azure-ad-pim-powershell-module/ . With the recent update of the AzureADPreview Module, the cmdlets for managing Privileged Roles are now included in the module, so there is no longer required to install a separate module for this! In this blog post I will explain and show how these commands can be used.https://gotoguy.blog/2018/09/18/exporting-and-importing-powerapps-and-flows-package-that-use-a-custom-connector/Tue, 18 Sep 2018 23:00:43 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/09/18/exporting-and-importing-powerapps-and-flows-package-that-use-a-custom-connector/Just recently I published a blog post on how to use PowerApps and Flow with a custom connector using Microsoft Graph API, to create an app for Azure AD PIM (Privileged Identity Management): https://gotoguy.blog/2018/09/15/create-your-own-azure-ad-pim-app-with-powerapps-and-flow-using-microsoft-graph/ . In this blog post I want to share some instructions and experiences on exporting the PowerApp and Flows to a package, and how you can export the Custom Connector definitions to a swagger file. After that I will show how you in a new environment can import these definitions, and import the PowerApp and Flow package.https://gotoguy.blog/2018/09/15/create-your-own-azure-ad-pim-app-with-powerapps-and-flow-using-microsoft-graph/Sat, 15 Sep 2018 11:43:20 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/09/15/create-your-own-azure-ad-pim-app-with-powerapps-and-flow-using-microsoft-graph/A while back I wrote a blog post on how you could access Microsoft Graph API using a custom connector in PowerApps and Flows: https://gotoguy.blog/2017/12/17/access-microsoft-graph-api-using-custom-connector-in-powerapps-and-flows/ . In this blog article I will build on that blog post to provide a practical example of using Microsoft Graph, and create an Azure AD PIM (Privileged Identity Management) App for activating any eligible admin roles for the logged on user. First lets look into some of the documentation and what we need to prepare.https://gotoguy.blog/2018/05/22/getting-started-with-azure-ad-pim-powershell-module/Tue, 22 May 2018 21:40:01 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/05/22/getting-started-with-azure-ad-pim-powershell-module/This is a short blog post showing how you can get started and some examples of using the PIM PowerShell Module for Azure AD Privileged Identity Management. You can read more about Azure AD Privileged Identity Management here: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-privileged-identity-management-configure , or by just using the following short URL: https://aka.ms/AzureADPIM ! Installing the Azure AD PIM PowerShell Module Since there are no PIM related commands in the AzureAD or AzureADPreview PowerShell Modules, we will have to install a separate module for PIM.https://gotoguy.blog/2018/05/04/how-to-configure-conditional-access-for-azure-ad-pim/Fri, 04 May 2018 12:11:10 +0000Jan Vidar Elvenhttps://gotoguy.blog/2018/05/04/how-to-configure-conditional-access-for-azure-ad-pim/Azure AD Privileged Identity Management is a really great security feature for controlling those Azure AD and Azure Subscription administrator roles. By implementing Azure AD PIM you can let users with admin roles elevate themselves when they need to, using just in time (JIT) and eligible roles instead of permanent admin roles. You can even implement approval workflows and audit trails, so if you haven’t looked into it you should really take a look!