I am studying for the "Exam MS-100: Microsoft 365 Identity and Services" exam. This is a real life saver, so glad I found your channel - Thank you for the quality of content and for all of your time
I love the way you teach, each episode is well structured. I normally watch each of your video at least twice, 1st time I just watch, 2nd time I will make notes in my OneNote (in Chinese, hah). Well done and I will keep being your fan.
This was one of the worst performing videos I had, and it seemed like there was very little interest compared to my other videos so I went in a different direction. So thanks for letting me know you are interested…I will put it back on my list
Hey Rah, those are not done yet…other projects got in the way and this was didn’t perform well at the time…but I am working on PIM as part of a new security series…stay tuned!
Hi! At the end of the video, you mention that this can be used for "set them up for projects and applications like Windows Virtual Desktop". Can you explain how this can be used for WVD?
Assign the target AD group to the app group then, This is your approval work flow to assign a user to an application group just like the examples I showed.
Thanks...if you mean the Azure AD series you can find the videos in the playlist section on my channel. If you mean access review and PIM I have not finished or uploaded them yet. The WVD certification series is taking all my cycles. It will be over soon then I have about 17 videos I am working on across many areas including this
Hello, I have a question. When the packages expire, does the guest account get disabled? I am really looking for a way to create expiry dates for azure accounts for contractors/consultants. Such that i can have the accounts expire incase my support guys forget to decommission this accounts. I see the Access review and Entitlement Management are more tied to roles, or Groups, Applications. Is there anyway to have the accounts get disabled or at least block sign in after the set date.
When the package expires the users will lose their access, but the account won't be disabled. the idea is to manage as much as possible with the entitlement packages...then if the user loses all access it doesn't matter if the account is enabled or disabled...they can't get to anything.
In short...mostly...but it kinda depends what you need them to do. As long as Guests don't need to request access...they don't need a license Here is the doc on licenses for entitlement packages. docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-overview?WT.mc_id=Portal-Microsoft_AAD_ERM#license-requirements
@@AzureAcademy thanks for responding. I actually tried it. Guest user only has o365 e3 license originally and not given any license in my tenant. Guest was able to request access and once granted, as able to access. So, I'm confused.
Azure AD Premium P2 licenses are not required for the following tasks: No licenses are required for users with the Global Administrator role who set up the initial catalogs, access packages, and policies, and delegate administrative tasks to other users. No licenses are required for users who have been delegated administrative tasks, such as catalog creator, catalog owner, and access package manager. No licenses are required for guests who can request access packages, but do not request an access package.
Hi, great video and explanation but why sponsors and not external/internal approvers? What is the logic behind it? It makes no sense to me as it does the same thing.
Yes they do the same thing, just showing different ways of implementation. It is an easy way to show roles in the org approval process...and like I showed you don’t need to use all of them.
My comment wasn't related to what was in the video as that is very clear but to the way Microsoft implements different things. Again, I don't see the reason or the idea of using 2 completely different words for the same thing. This is just one of those things that people hate in Azure and find it extremely complicated/ confusing.
I like all your videos . But I would like to suggest one thing and this is my personal opinion . You are moving in a fast manner , If you could slow down a little bit while doing practical it would be absolutely perfect .
Thanks. I believe you will find that all my videos that have me on the thumbnail are better in that way. Watch one and let me know what you think --> ruclips.net/video/GrOz2Le9VZ0/видео.html
it was too quick realyy u were so fast in explaining but u shld realize that people here are new to this wont be able to capture to quickly so it was better if u have given just one example sloly
@@AzureAcademy Try pausing between your sentences. Helps the viewers to absorb your comments. Also I am Canadian so there's that. Apparently our sentences always end like we have a question - lol. The content is great though. Thank you.
If YOU want to MASTER Azure Active Directory YOU can start TODAY with The Azure Academy Azure AD Series aka.ms/AzureAcademy-AzureAD
👍
Another great video. Can’t wait for Access Review and Privileged Identity Management vids.
Coming soon!
I am studying for the "Exam MS-100: Microsoft 365 Identity and Services" exam. This is a real life saver, so glad I found your channel - Thank you for the quality of content and for all of your time
Thanks Dave! Happy I can help, please share The Azure Academy with everyone!
Sweet! Very helpful and detailed video. Keep up the great work sir.
Thanks! Let me know what other things you want to learn
I love the way you teach, each episode is well structured. I normally watch each of your video at least twice, 1st time I just watch, 2nd time I will make notes in my OneNote (in Chinese, hah).
Well done and I will keep being your fan.
Wow, thank you! Please help me share The Azure Academy with everyone so they can learn as well. 👍
I came to know about this feature thru a MS SME but this was the perfect overview.
Thanks Ashish! A very high compliment indeed
👍
Great video! I dig it...
👍👍
thank you, very informative
You’re welcome
That's some great content Dean. Thank you very much. You mentioned there's going to be a part 2. Where can I find it?
This was one of the worst performing videos I had, and it seemed like there was very little interest compared to my other videos so I went in a different direction. So thanks for letting me know you are interested…I will put it back on my list
Thank you for this! I am trying to locate the series for Identity Governance (Access Reviews and PIM) were those uploaded??
Hey Rah, those are not done yet…other projects got in the way and this was didn’t perform well at the time…but I am working on PIM as part of a new security series…stay tuned!
@@AzureAcademy Thank you, looking forward to it!
👍👍
Hi! At the end of the video, you mention that this can be used for "set them up for projects and applications like Windows Virtual Desktop". Can you explain how this can be used for WVD?
Assign the target AD group to the app group then, This is your approval work flow to assign a user to an application group just like the examples I showed.
great content
Thanks Santhosh ☺️
Excellent
That is awesome to hear, thanks!
Great video but I can't find the rest of the videos for this series
Thanks...if you mean the Azure AD series you can find the videos in the playlist section on my channel.
If you mean access review and PIM I have not finished or uploaded them yet. The WVD certification series is taking all my cycles.
It will be over soon then I have about 17 videos I am working on across many areas including this
@@AzureAcademy No problem, just glad I found your channel to be honest. So well explained, keep up the good work 😃😃
thanks!
amazing content! where can I find the part 2?
At the time I made this video…almost no one watched it…but over time, baby have…so I will revisit this topic
Hello, I have a question. When the packages expire, does the guest account get disabled? I am really looking for a way to create expiry dates for azure accounts for contractors/consultants. Such that i can have the accounts expire incase my support guys forget to decommission this accounts. I see the Access review and Entitlement Management are more tied to roles, or Groups, Applications. Is there anyway to have the accounts get disabled or at least block sign in after the set date.
When the package expires the users will lose their access, but the account won't be disabled. the idea is to manage as much as possible with the entitlement packages...then if the user loses all access it doesn't matter if the account is enabled or disabled...they can't get to anything.
How exactly does licensing work with entitlement management? I mean do I need to assign licenses to my guest users as well?
In short...mostly...but it kinda depends what you need them to do.
As long as Guests don't need to request access...they don't need a license
Here is the doc on licenses for entitlement packages.
docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-overview?WT.mc_id=Portal-Microsoft_AAD_ERM#license-requirements
@@AzureAcademy thanks for responding. I actually tried it. Guest user only has o365 e3 license originally and not given any license in my tenant. Guest was able to request access and once granted, as able to access. So, I'm confused.
Confused about what? Guest can request access to existing packages that they have been entitled to.
@@AzureAcademy in this scenario u just said, does that require guests to be licensed with AAD Prem P2?
Azure AD Premium P2 licenses are not required for the following tasks:
No licenses are required for users with the Global Administrator role who set up the initial catalogs, access packages, and policies, and delegate administrative tasks to other users.
No licenses are required for users who have been delegated administrative tasks, such as catalog creator, catalog owner, and access package manager.
No licenses are required for guests who can request access packages, but do not request an access package.
Hi, great video and explanation but why sponsors and not external/internal approvers? What is the logic behind it? It makes no sense to me as it does the same thing.
Yes they do the same thing, just showing different ways of implementation.
It is an easy way to show roles in the org approval process...and like I showed you don’t need to use all of them.
My comment wasn't related to what was in the video as that is very clear but to the way Microsoft implements different things. Again, I don't see the reason or the idea of using 2 completely different words for the same thing. This is just one of those things that people hate in Azure and find it extremely complicated/ confusing.
thanks for the feedback...I will pass that on to the Product Team
I like all your videos . But I would like to suggest one thing and this is my personal opinion . You are moving in a fast manner , If you could slow down a little bit while doing practical it would be absolutely perfect .
Thanks. I believe you will find that all my videos that have me on the thumbnail are better in that way. Watch one and let me know what you think --> ruclips.net/video/GrOz2Le9VZ0/видео.html
Soy el primer comentario ahuevo pinches Azure
Sí, estás #1 👍😉
it was too quick realyy u were so fast in explaining but u shld realize that people here are new to this wont be able to capture to quickly so it was better if u have given just one example sloly
I think you will find my videos for the last year are better paced…also, you can go back to watch sections again and again until it makes sense 🤔
Sounds like a robot talking. Hard to listen to.
wow...first time I have had that comment...can you tell me why you feel this way and how you think it could be improved?
@@AzureAcademy Try pausing between your sentences. Helps the viewers to absorb your comments. Also I am Canadian so there's that. Apparently our sentences always end like we have a question - lol. The content is great though. Thank you.
Thanks for the feedback Sarah!