A meeting in a bright meeting room

Privileged Identity & Access Management with Entra ID

Privileged access under control: least privilege and just-in-time.

Without control over privileged accounts, any environment is exposed. ODCUS introduced privileged identity management with Microsoft Entra ID.

Starting point

Administrators used normal user accounts for admin tasks, roles were over-privileged, and a review process for permission assignments was missing.

Approach

  • Implemented privileged identity management with Microsoft Entra ID
  • RBAC group model for administrators and the IT team
  • Introduced least-privilege and just-in-time principles
  • Established review processes for roles and permissions
  • Set up monitoring and logging, separated user and admin accounts

Result

  • Controlled, traceable privileged access
  • A significantly reduced attack surface
  • Recurring recertification of roles
  • Complete logging for audits

Frameworks and tools used

Microsoft Entra IDZero TrustRBACPIM