More great info on AzureAD security. Read the thread;
My take: Many Azure AD (AAD) environments are repeating same mistakes as they did with Active Directory.
— Sean Metcalf (@PyroTek3) December 24, 2020
Improve AAD Security:
1. Use PIM to control AAD roles (limit permanent members)
2. Only admin accounts in AAD roles
3. Ensure cloud admins use admin systems
Thread 1/3 https://t.co/5oTFSpj4I8