Posts
All the articles I've posted.
What this blog is
Field notes on Entra ID, Azure and identity security — written down properly instead of disappearing into a scratch file.
Restricted Management AUs in Entra ID: two undocumented paths that actually work
Restricted Management Administrative Units contain a service principal holding Application.ReadWrite.All — but the design depends on three configurations Microsoft does not document. All three tested against a live tenant with az rest.