Topic
The March 2026 Stryker breach wiped 80,000 devices through one compromised admin and Intune's own remote wipe. Multi Admin Approval, PIM, and break glass governance close that hole.
Always-on GDAP roles hand an attacker every customer tenant your techs can reach. PIM for Groups turns that into just-in-time access with MFA, approvals, and an audit trail.
CIPP and Microsoft 365 Lighthouse both beat Partner Center for multi-tenant management. Here is the full comparison across twelve categories, with a downloadable matrix and a clear verdict.
Rotation, JIT elevation, audit logging, and a plan for the two moments admin rights actually get used. The full governance picture for local admin accounts, first party and third party.
App secrets and refresh tokens hardcoded in scripts are a breach waiting to happen. Two scripts to load Secure Application Model secrets into Azure Key Vault and pull them at runtime for headless automation.
The exclusion added during a migration, the policy stuck in report-only, the tenant that never got the baseline. Here are the gaps attackers find first, and the 16-policy baseline that closes them.
When you widen an app registration's Graph permissions under GDAP, every customer relationship needs the matching role. Here is the architecture and script that updates them all at once.
September 25 ends DAP for new customers, Conditional Access protected actions hit GA, Python lands in Excel, and the legacy Exchange Online client ID heads for retirement.
GDAP removes the pre-consent that delegated vendor integrations rely on. Here is the split of work: the prerequisites the MSP configures and the consent workflow the vendor has to build.
GDAP removes the pre-consent that made partner app registrations just work. Here is the full repair path: service account, app registration, GDAP roles, and the consent API, with scripts.
Microsoft announces Microsoft 365 Copilot, DAP-to-GDAP transitions start May 22 with eight limited roles, Authenticator Lite auto-enables May 26, and the faster Teams client enters preview.
Teams Premium launches with GPT-3.5 features at $7 intro pricing, the Microsoft Intune Suite and Plan 2 get a March 1 GA date, Exchange tightens quarantine permissions, and GDAP dates firm up.
