Intro

How is least privilege different in 2025? Richard talks to Bailey Bercik about the ongoing efforts to minimize users, administrators, and applications' privileges in 2025. Bailey talks about the power of Entra Permissions Management to help you see what permissions are going unused on various accounts so that you can tailor rights to individual accounts without things becoming unmanageable. Artificial intelligence is a forcing function for many permission issues, with these new tools potentially creating problems when given unnecessary rights. But those same tools can help you understand where permissions are being underutilized and help protect your systems!

Links

• Principle of Least Privilege
• Enable Permission Management
• Entra Permissions Management
• Microsoft Security Copilot
• Copilot in Microsoft Entra
• SEC545: GenAI and LLM Application Security
• How Attackers Use Apps to Attack Video

Recorded December 16, 2024