{"id":20376,"date":"2022-02-02T08:39:51","date_gmt":"2022-02-02T13:39:51","guid":{"rendered":"https:\/\/www.eginnovations.com\/blog\/?p=20376"},"modified":"2024-04-08T03:22:02","modified_gmt":"2024-04-08T07:22:02","slug":"track-users-azure-active-directory","status":"publish","type":"post","link":"https:\/\/www.eginnovations.com\/blog\/track-users-azure-active-directory\/","title":{"rendered":"Monitoring and Managing Azure Active Directory Users"},"content":{"rendered":"
\n

This blog post is part 2 of our Monitoring Microsoft Azure Active Directory series. See How to monitor Azure Active Directory<\/a> for more articles on monitoring Azure AD.<\/em><\/p>\n

Managing Identity is a big challenge in a cloud environment, especially when users can potentially log in from anywhere. Additionally, users can often use different types of devices to log in and access cloud-hosted resources. Without a central Authentication and Authorization source, it is very difficult to manage who can login to what and who can do what with a cloud resource. On top of that, there can be thousands of identical identities from different organizations trying to consume the cloud resources. Microsoft solves all the above challenges with the help of Azure Active Directory (Azure AD).<\/p>\n

We can get a decent basic understanding of Azure Active Directory from the Microsoft documentation,<\/a> and I\u2019ve written a quick overview Azure Active Directory (Azure AD) – 101,<\/a> which includes the relationship between Active Directory and Azure AD Connector.<\/p>\n

Azure AD as the name suggests is a directory of all your usernames, credentials, and access rights to resources. It is designed to operate in a cloud infrastructure using REST APIs to pass data from one application and system to the other. Azure AD is based upon the building blocks of users and groups.<\/p>\n

Importance of Monitoring Users Created in Azure Active Directory<\/h2>\n

In this blog post, I\u2019ll focus on monitoring users within Azure AD<\/a>, including a list of key checks and questions you should consider when evaluating your auditing, security, and visibility needs for managing users.<\/p>\n

\"Azure<\/a><\/p>\n

Figure 1: Monitor every layer of Azure AD, including users, devices, audit logs, groups, directory roles, APP Registrations<\/div>\n

The user account in Azure AD is like a user account in Active Directory. An Azure AD can have user accounts from :<\/p>\n