User Accounts & Roles (part 2)

By Ashwin Venugopal -

 



To read part 1, please click here
To read part 3, please click here






Manage User Accounts & Licenses

It means managing several account settings like assigning administrator roles, setting uses' sign-in status, specifying user location settings, and assigning licenses with the help of whatever method you use to provision user accounts. You have to perform following steps to edit a user account:
  1. Click Users and then Active Users on the Microsoft 365 admin center Home page.
  2. Select the user account you want to edit to open the User properties page.
  3. Now you can modify the user name and add or modify the email addresses in the User name/Email Aliases section.
  4. You can also modify the assigned license while setting up the user location as it is required by the Microsoft so that it can offer only permitted services to that user.
  5. You can modify group membership for the user in the Group membership section. 
  6. After specifying the sign-in status of the particular users in the Sign-in status section, you can set this to Sign-in allowed or Sign-in blocked. If it is set as Sign-in blocked, the user will not be able to sign in to Microsoft 365 in their next sign-in attempt. 
  7. The Office installs section shows the installations and deactivates Office apps for specific devices.   
  8. You can also specify if the selected users should have Administrators permissions in the Roles sections.
  9. You can edit information for the user in the Display name/Office pone section.
  10. The Mail Settings section will help you to modify mailbox permissions, email forwarding, automatic replies, and email apps.
  11. In the OneDrive Settings section, you can easily obtain access to the user's files, view the storage quota, and force a sign-out from all Microsoft 365 sessions. 

Remove & Recover User Accounts

To delete one or more users:
  1. Click Users and then Active Users in the Microsoft 365 admin center Home page.
  2. Select the users that you want to delete, select Delete user.
  3. Click Delete user in the message box to delete the selected user.
  4. When they have successfully deleted, click Close. 
Windows PowerShell can also be used to delete user accounts with the help of Remove-MsolUser command along with the -ObjectId Guid or the -UserPrincipalName string parameters.

To restore a user:

  1. Select Deleted users on the Users menu in the Microsoft 365 admin center.
  2. Choose the user that you want to restore and then Restore user.
  3. Select the way you want to assign the user password and then click Restore.








To read part 1, please click here
To read part 3, please click here








Comments

Post a Comment

Popular posts from this blog

Deployment (Part 3)

By Ashwin Venugopal -
Image
  To read part 1, please click  here To read part 2, please click  here Microsoft Monitoring Agent (MMA) MMA is used across multiple Microsoft solutions and has undergone a few name changes as its features and functionality have evolved. If it is being considered to be used, then following areas should be covered during a Microsoft Sentinel deployment project: Consider the timelines and the strategy for a migration to AMA (Azure Monitor Agent) before the MMA end-of-life.  Consider the central deployment and management methodology for MMA. Determine which endpoints are in scope for deployment as these affect the log ingestion volume significantly.  Azure Monitor Agent (AMA) Organizations with MMA as the main Microsoft Sentinel agent should start planning the migration to AMA as soon as possible to avoid a rushed migration. One of the main advantages of AMA is the ability to control the log collection policy centrally and apply different policies against different...
Read more

Deployment (Part 1)

By Ashwin Venugopal -
Image
  To read part 2, please click  here To read part 3, please click  here Azure Resources Microsoft Sentinel needs following resources to be created: Subscription (if a dedicated subscription(s) will be used) Resource group(s) Log Analytics workspace(s) Automation rules/playbook Alert rules Workbooks Microsoft Sentinel offers hundreds of alert rules, workbooks, and automation playbook templates along with hunting scripts. The templates can be used to activate/deploy schedule alerts, create customized dashboards, create automation playbooks and perform threat-hunting activities. Generally, once deployed, the resources created have to be adjusted to match the existing environment, configure local credentials, etc. Methods of deployment: Manual- Administrator can manually configures the Microsoft Sentinel resources with the help of Azure portal. Any manual process has the inherent risks of human operator error, lack of compliance with potential change control procedures, and u...
Read more

Project Resourcing (Part 2)

By Ashwin Venugopal -
Image
  To read part 1, please click  here Engineering - SIEM The SIEM engineers configures Microsoft Sentinel, including Log Analytics, Logic Apps, workbooks, and playbooks. They are also responsible for the following high-level tasks: Initial configuration of Azure tenant, including provisioning required resources, assigning access roles, and configuring workspace parameters like log retention, resource tagging, and blueprints.  Deployment and configuration of syslog/CEF log collection agents in appropriate locations to collect logs from on-premises devices. Generally, it will be joint effort of both system engineer and SIEM engineer, involving configuration and potential troubleshooting.  Working with system owners to enable log forwarding and configuring any required parsing of log data in Log Analytics.  Working with security operations to create and deploy KQL analytic rules to offer detections for SOC/Computer Security Incident Response Team (CSRIT) use. Tuning...
Read more