Posts

Technical notes and essays related to identity, access, and security architecture.

There is no fixed publishing cadence. Articles are written when a topic benefits from long-form explanation or clarification.

Who Really Has Permissions in Entra and Azure? Mapping PIM, RBAC, and Scope Sprawl

Jun 6, 2026

A practical model for understanding how permissions spread across Microsoft Entra, Azure RBAC, PIM, groups, service principals, managed identities, and scope inheritance.

Categories: Cloud IAM , Authentication & Federation , Zero Trust Architecture

Tags: microsoft-entra , azure-rbac , pim , permission-sprawl , least-privilege , identity-governance , zero-trust

Series: Microsoft Entra Security

Microsoft Entra Conditional Access: The Practical Basics

Jun 6, 2026

A practical introduction to Microsoft Entra Conditional Access and how it fits into modern identity security.

Categories: Authentication & Federation , Zero Trust Architecture

Tags: microsoft-entra , conditional-access , zero-trust , mfa

Series: Microsoft Entra Security