Differences

This shows you the differences between two versions of the page.

--- azure:az-500:alt:identity_protection [2022/07/26 19:11] – created mmuze
+++ azure:az-500:alt:identity_protection [2022/08/07 21:54] (current) – mmuze
@@ Line 2: / Line 2: @@
   * Identity Protection provides policies for a few common scenarios.
   * These policies require an AAD P2 license
+  * //Conditional Access policies// could be used in place of Identity Protection policies to achieve similar things. It is broader in scope, but includes capabilities that overlap with Identity Protection.
   * [[https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-policies]]
   * These are under ''Azure AD/Manage/Security/Identity Protection/Protect'' and include these:
@@ Line 25: / Line 26: @@
 > The risk signals can trigger remediation efforts such as requiring users to: perform Azure AD Multi-Factor Authentication, reset their password using self-service password reset, or blocking until an administrator takes action.
+  * [[https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection#permissions|Role permissions]] for Identity Protection
+  * Only **Global Administrators** can onboard Identity Protection
 ===== User Risk Policy =====
   * User risk is a calculation of probability that an identity has been compromised.