PIMTool
The Problem Have you ever been in the situation, where you have to activate more than one PIM role and it took ages? I built a tool, which will make PIM comfy. What is PIM? PIM or Privileged Identity Management…
Category Entra ID
Assign remote tenant groups to Azure roles
Why is this a big deal? Recently I stumbled above a new feature in the Azure Portal which let me assign role assigments to remote tenant groups. This will allow you to assign Azure roles to e.g. GDAP groups! Why…
What happens when you disable security defaults?
Introduction Did you ever wonder, what happens, when you disable the security defaults in an Entra ID Tenant? I recently setup a brand new tenant and were pretty surprised. What are security defaults? Maybe first, let’s have a look, what…
App Permission Info
Introduction Ever wanted to know, which app has which permission in your tenant? Happy to help 😊 This script gets all permissions from every app registration and enterprise app in the tenant and reports it in a user-friendly way. Capabilities…
Entra Backup and Recovery
At the time of writing, this feature is in public preview (March 2026) Introduction Don’t you think Microsoft is backing up your tenant… but now they do! At least some parts of it. Most of you have (hopefully) a working…
App Protection Policies for Microsoft Edge
Why App Protection Policies? App Protection Policies are a great way to secure data while on BYOD – some may know that already from iOS or Android. I will show you today how to start with MAM for Edge on…
Get rid of passwords with synced passkeys in Entra-ID
As the time of writing, synced passkeys are still in public preview (December 2025). Introduction I recently switched to a new iPhone and was REALLY annoyed, that my Authenticator App backup went south… Time to try synced passkeys. I use…