Privileged access management in Office 365

Privileged access management in Office 365 - In Preview now

Privileged access management in Office 365, would be a pretty good feature for that organization needing to meet compliance requirements. Currently, I am helping a client to understand the security possibility in O365 so they can implement and enable secure sharing through ODFB. This new capability, when available, will basically bring a process/feature used by MSFT in their Office 365 service maintenance management. One can control access to the tenant by those with admin privileges. No more privileged users can log in and administer the services without an oversight.

This feature creates a workflow, requiring approvals and expires the access after an interval of time. Everything is audited so compliance team is happy as well.

Read more: https://techcommunity.microsoft.com/t5/Security-Privacy-and-Compliance/Announcing-preview-of-privileged-access-management-in-Office-365/ba-p/183743

Comments

Promoted Links - Wrap and size tiles with Client Side Rendering

SharePoint 2013 introduces Promoted Links list and the web part is unbelievable hit with my client users. Anyone who has seen it wants it in their team/portal sites. With increase in usage comes new requirements. And so the requirement did come, for reducing the size of promoted link tiles just so it fits into a web part zone of a custom page layout that was being used. User was adding 3 tiles and the third tile was displayed only partially and a header with scroll buttons was displayed for navigation. Users would prefer to see full 3 tiles in the row. If there are more than 3 items in the list, then they would prefer that the tiles be wrapped to the next row. Picture below shows out of the box Promoted Links output. There are 6 items in the list. Notice that the Green tile is truncated: To display the 3 full tiles in a row within the web part zone required that the tile size be reduced. Promoted links are rendered using Client Side Rendering ...

Office 365 access: Enforcing VPN with ADFS

Recently, I was asked for possible solutions to enforce VPN connection to access Office 365. This seems odd at first, for this is against one of the tenets of Office 365, accessing service from anywhere and on any device. But then there is always a certain use case that needs to be addressed. In this case, the customer had deployed Office 365 and federated using ADFS, a textbook deployment with 2 ADFS server farm, and 2 WAPs in the DMZ. Within the Microsoft 365 world, Intune and Conditional access would enable for enforcing policies. However, that will also require the customer to acquire additional licenses beyond O365 E3, which my customer did not want to do. I compiled some of the possibilities with ADFS to enforce VPN connectivity. Although I do not recommend anyone to bypass the features, I want to share this out to get some feedback from the community, to see if this is such a common scenario, or if anyone implemented any of these or other cost-effective solutions...

Highly Discussed Office 365 features in dev/testing

Some Office 365 features that are in dev/testing cycle as of 9/2/2018 that are interesting and quite often discussed with clients: Rich Yammer feeds in SharePoint New web part to add a fully functional native Yammer feed to any modern SharePoint site. Advanced anti-spoofing protection for external domains in Office 365 Extending coverage of Advanced Anti-spoofing protection for external domains in Office 365 and additional checks for stricter DMARC enforcement Microsoft Bookings - mobile app read-only mode Users with an Office 365 license who have been added to a booking calendar but are not the Bookings calendar admin can now use the Bookings mobile app in read-only mode to see their bookings. (For some reason, bookings have not picked up. I thought this would be helpful to every organization. Maybe we are not educating properly?) Microsoft Secure Score support for new controls Secure Score will add new controls to support Microsoft Cloud App Security and Azure...

UralTalk

Search This Blog