About

NBPTech is the practice of Jurre Janssens, working on Microsoft identity and cloud infrastructure — primarily Entra ID, Azure, and the security questions that sit between them.

This site is where findings from that work get written down: configurations that behave unexpectedly, permission models that don’t match their documentation, and the occasional genuine security gap.

On accuracy

Everything here is something I encountered directly and verified. Where a conclusion is provisional, the post says so. Identity platforms change frequently — a post that was accurate when published may not stay that way, and materially revised posts carry an updated timestamp.

Corrections are welcome and get credited.

On disclosure

Findings are published only after any affected party has remediated and cleared them. Customer identifiers — tenant IDs, object IDs, domain names, account details — are removed or replaced with placeholders throughout, including in screenshots and command output.

Contact

Reach me on LinkedIn.

For anything security-sensitive, say so in the first message and we’ll move to an appropriate channel before any details are exchanged.