This document discusses conditional access and access management in Microsoft 365. It covers authentication versus authorization, roles-based access control, conditional access policies, Azure AD Privileged Identity Management, and Privileged Access Management in Office 365. It provides information on the capabilities of different license tiers and describes how to configure Privileged Access Management in Office 365.

2. ExploringConditional
Access to content storedin
Office365

3. Who am I?

4. Who am I?

5. What is this session about?

6. Access Layers in Microsoft 365
Encryption
RBAC
Conditional Access
Azure AD PIM
PAM in Office 365
Prevent unauthorized
illegitimateaccess
Govern
legitimate
access
Role & risk based
Standing access
(Permissions)
JIT & JEA
With Approval
(Elevationof Privilege)

7. RBAC & Conditional Access
RBAC
Conditional Access
Role & risk based
Standing access
(Permissions)

8. Authentication Versus Authorisation

9. Authentication Versus Authorisation

10. When are they accessing?
What do we mean by conditional access?

11. When are they accessing?
What do we mean by conditional access?

12. When are they accessing?
What do we mean by conditional access?

13. Additional options – EM+S E5

14. Additional options EM+S

16. What can be achieved with ADFS

17. What can be achieved with ADFS

18. What can be achieved with ADFS

19. What can be achieved with ADFS

20. What CAN’T be achieved with ADFS?
@tenant.onmicrosoft.com

22. What can be achieved with E1/E3/E5

23. What can be achieved with E1/E3/E5

24. What can be achieved with E1/E3/E5

25. What can be achieved with E1/E3/E5

26. What can be achieved with E1/E3/E5

27. What can be achieved with E1/E3/E5

28. What can be achieved with E1/E3/E5

29. What can be achieved with E1/E3/E5

30. What can be achieved with E1/E3/E5

31. What can be achieved with E1/E3/E5

32. What can be achieved with E1/E3/E5

33. MFA Pro Tip!

34. SharePointPerimeterBlocking&MFA

36. What can be achieved with EM+S E3

37. What can be achieved with EM+S E3*

38. SharePointSiteCollectionScoped
Policies

40. Site Classification Label

41. Central Admin Control

42. BRK3101 – Securing your SharePoint and OneDrive
content with access policies and labels – Sesha Mani
Watch the Ignite Session for Demos

44. What can be achieved with EM+S E5

45. What can be achieved with EM+S E5

46. RiskBasedPolicies,AIP&
CloudAppSecurity

47. Access Layers in Microsoft 365
Encryption
RBAC
Conditional Access
Azure AD PIM
PAM in Office 365
Prevent unauthorized
illegitimateaccess
Govern
legitimate
access
Role & risk based
Standing access
(Permissions)
JIT & JEA
With Approval
(Elevationof Privilege)

48. PIM & PAM
Azure AD PIM
PAM in Office 365
JIT & JEA
With Approval
(Elevationof Privilege)

50. Comparing PIM/PAM
Requires EM+S E5 (Or Azure AD P2)
Permits Role based control
Available for 32 Admin Roles
Available for Azure Resources
Ignite – BRK3248
Person Focussed
GA Announced 25/09 @ Ignite
Requires Office 365 E5 (or Advanced
Compliance Sku)
Permits TASK/ROLE based control
Only available for EXCHANGE
initially.
Ignite – BRK3222
Task Focussed
Azure PIM Office 365 PAM

54. PIMinaction

56. Configuring Office 365 PAM

57. Configuring Office 365 PAM

58. Configuring Office 365 PAM

59. Configuring Office 365 PAM

60. Configuring Office 365 PAM

61. Configuring Office 365 PAM

62. Configuring Office 365 PAM

63. Configuring Office 365 PAM

64. PAMinaction

66. Useful Resources
Access Control Policies
Access Control Policies
AD Risk Events
https://aka.ms/mfasetup
Docs
Docs

68. Thank you