Brian Clark
My feedback
-
148 votesBrian Clark
supported this idea
·
-
51 votesstarted · 12 comments · Azure Active Directory » Privileged Identity Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
21 votesplanned · 2 comments · Azure Active Directory » Privileged Identity Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
31 votesstarted · 0 comments · Azure Active Directory » Privileged Identity Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
45 votesstarted · 7 comments · Azure Active Directory » Privileged Identity Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
60 votesunder review · 11 comments · Azure Active Directory » Privileged Identity Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
45 votesplanned · 2 comments · Azure Active Directory » Privileged Identity Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
228 votesstarted · 19 comments · Azure Active Directory » Privileged Identity Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
109 votesstarted · 7 comments · Azure Active Directory » Privileged Identity Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
105 votesstarted · 11 comments · Azure Active Directory » Privileged Identity Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
160 votes18 comments · Azure Active Directory » Self-Service Password Reset · Flag idea as inappropriate… · Admin →
We are planning to re-design the self-service password reset experience. The new experience will be mobile-friendly! We’ll keep you up to date as we make progress.
Brian Clark
supported this idea
·
-
178 votes
We hear you loud and clear! We know this is a frequent ask and we do have this on our backlog. Unfortunately, I don’t have a timeline to share right now.
Brian Clark
supported this idea
·
-
160 votes15 comments · Azure Active Directory » Multi-factor Authentication · Flag idea as inappropriate… · Admin →
Azure MFA is currently designing the experience for FIDO 2.0. This is the next iteration of the FIDO U2F standard that the link references.
Richard
Brian Clark
supported this idea
·
-
550 votes71 comments · Azure Active Directory » Role-based Access Control · Flag idea as inappropriate… · Admin →
Folks,
We are working on it. There is an elevation of privilege concern associated with this feature. If a group is assigned a role, any IT admin who can manage group membership can manage that group’s membership and indirectly manage who gets the role. So, we have to ensure that the feature is secure.We are taking a staged approach to execute this feature –
Stage 1: Supporting cloud groups to be assigned to roles
Stage 2: Supporting on-prem groups to be assigned to rolesStay tuned!
Regards,
Abhijeet Kumar Sinha
Azure Active Directory TeamBrian Clark
supported this idea
·
-
321 votes35 comments · Azure Active Directory » Role-based Access Control · Flag idea as inappropriate… · Admin →
Hi folks,
Just a quick update here. We’re still actively working on support for custom roles (RBAC) across Azure AD. Stay tuned for more announcements in the next couple of months.You can have a look at what we’ve shipped thus far (custom roles for application registration management) here – https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/roles-custom-overview.
Regards,
Vince Smith
Azure Active Directory TeamBrian Clark
supported this idea
·
-
396 votes
Hi,
Just a quick update. This is still on the roadmap, but not work that has started. The comments here are useful as we start the design. ThanksBrian Clark
supported this idea
·
-
825 votes122 comments · Azure Active Directory » Multi-factor Authentication · Flag idea as inappropriate… · Admin →
We’re really pleased to let you know that we’ve released the first authentication method APIs to public preview:
https://docs.microsoft.com/graph/api/resources/authenticationmethods-overview
So far there are APIs for managing phone numbers and password resets. When phone numbers are set with the API, the user can use that number for MFA and SSPR (as allowed by your tenant’s policy).
The team is hard at work at building out APIs for all of the other authentication methods, and we’ll update the response here as they’re released.
Brian Clark
supported this idea
·
-
700 votes81 comments · Azure Active Directory » User Creation, Deletion, and Profile Management · Flag idea as inappropriate… · Admin →Brian Clark
supported this idea
·
-
1,278 votes246 comments · Azure Active Directory » Multi-factor Authentication · Flag idea as inappropriate… · Admin →
This feature is now on the roadmap. The MFA team is planning to adjust admin roles or create a new role that will allow delegation of MFA registration and credentials to an admin role.
Brian Clark
supported this idea
·
-
1,905 votes
We’re currently evaluating an option that will provide the functionality offered by nested groups, but removes the complexity nested groups adds. We appreciate your patience on this ask and want to ensure we deliver a solution that benefits all of our customers. Below are use cases that we’d like for you to stack rank, with #1 being priority for you. We thank you for the continued comments and feedback.
Use case A: nested group in a cloud security group inherits apps assignment
Use case B: nested group in a cloud security group inherits license assignment
Use case C: nesting groups under Office 365 groupsBrian Clark
supported this idea
·
