Recurring Microsoft Entra reviews that ask designated reviewers whether a person still needs access to a group, application, access package or privileged role, optionally applying removals automatically.
Purview DLP covers Teams chat and channels, SharePoint external sharing is locked down, and Entra ID governance expires guests and automates access reviews. · Harden Microsoft Teams Security and Guest Access
Manual governance, such as a policy PDF, spreadsheet access reviews and a weekly change board, cannot keep up with deployment speed. · Compliance as Code
Access that is never reviewed keeps growing, and yearly recertifications end in rubber stamps. This episode shows identity architects, IAM and compliance teams how access packages, access reviews, lifecycle workflows and PIM in Microsoft Entra ID Governance…
You didn’t fail as an admin. The system failed because it needed you. After years of manual governance—access reviews, approvals, lifecycle policies—this episode exposes the uncomfortable truth: human-driven administration was never scalable in a...
Microsoft Teams channels are one of the most powerful yet misunderstood features in the entire Teams platform, and using them correctly can make or break your organization’s communication. In this episode, we dive into how Teams channels actually work, why…
Your “private” Microsoft Teams channels are quietly bleeding data – and default settings are to blame. In this episode, we walk through real-world incidents where dormant guest accounts, synced libraries, and careless PII pastes turned Teams into a silent…
Most Microsoft 365 environments don’t fail audits because of missing controls—they fail because of governance debt. Over time, quick fixes, unclear ownership, and poorly aligned operating models create hidden structural issues. These problems stay invisible…
Compliance is often treated as a documentation exercise—something organizations prepare for audits rather than embed into their daily operations. In this episode, we challenge that mindset by exploring the concept of Compliance as Code and why modern…
Shadow IT didn’t disappear, it evolved into AI agents quietly moving your data faster than your controls can see. In this episode, we break down how AI agents, Copilot Studio bots, and Power Automate flows are becoming the new Shadow IT inside Microsoft 365.…
This episode of the M365.fm podcast challenges a common misconception in cloud strategy: that managing features, tools, and configurations leads to control. Instead, it reveals that true cloud governance is an architectural discipline, not an operational…
This episode explores the Microsoft 365 maturity model through real-world insights gathered from auditing over 500 tenants. Instead of relying on theoretical frameworks, it uncovers how most organizations struggle with Microsoft 365 governance maturity…
This episode argues that the biggest governance mistake in Microsoft 365 isn’t misconfiguration—it’s timing. Most organizations treat governance as something to “add later,” but by doing that, they unintentionally design failure into the system from day one.…
SharePoint Premium with SharePoint Advanced Management (SAM) is the governance backbone that keeps Copilot from turning oversharing into a data leak. You’ll learn how to spot risky sites with Data Access Governance (DAG), lock down visibility with Restricted…
Most orgs still treat on-prem AD groups as sacred, syncing them to Entra ID and calling it “hybrid.” In reality, those objects are zombies: visible in Entra but ruled by on-prem, which blocks modern governance (dynamic membership, access reviews, APIs) and…
Preventing the Silent Guest Pile-Up in Microsoft 365 · Mirko Peters Welcome back to the podcast and our ongoing exploration of enterprise security. Today, we are diving deep into a phenomenon that sneaks up on even the most diligent…
Microsoft Entra Access Reviews Guide · Mirko Peters Learn Microsoft Entra access reviews with practical guidance on security, governance, access control, implementation, and real-world use.
It adds lifecycle and accountability around access through access reviews, entitlement management, access packages and lifecycle workflows. · From the episode: Entra ID Governance
How should you introduce Entra ID Governance?
Introduce it step by step, starting with the joiner-mover-leaver basics and moving toward access packages. This order puts lifecycle and accountability around access first, then adds access reviews and entitlement management so that access does not keep growing unchecked. · From the episode: Entra ID Governance
Why was human-driven Microsoft 365 administration never scalable?
Manual governance, such as access reviews, approvals and lifecycle policies, depends on people doing repetitive work. The episode argues the system failed because it needed admins in the loop, not because the admins failed. · From the episode: Automate Microsoft 365 Administration and…
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Experts and companies for this topic
Nobody has listed this topic yet. Add it to your profile.