Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
SOLVED

A standard AzureAD user have access to browse the admin portal

Brass Contributor

Hi All,

 

Found this great article: https://osddeployment.dk/2017/06/24/a-standard-azuread-user-have-access-to-browse-the-admin-portal/

 

Cheers to Per Larsen!

 

Do you have any suggestions for organizations which don't have Azure AD Premium license and cannot do conditional access policies?

I know, they need Azure AD Premium and they will buy it with EMS license, but this needs to be handled urgently.

 

Any other workarounds?

 

Br, Joonas

3 Replies

Well one simple way would be to block the clients from accessing https://portal.azure.com* 

 

But I know, CA is a better option for preventing this... ;)

 

BR

best response confirmed by Joonas Pakkanen (Brass Contributor)
Solution

There is a setting to disable this: Azure AD blade -> User Settings -> Restrict access to Azure AD administration portal.

Hi, 

 

Can this be scripted, turned on or off by using Powershell?

1 best response

Accepted Solutions
best response confirmed by Joonas Pakkanen (Brass Contributor)
Solution

There is a setting to disable this: Azure AD blade -> User Settings -> Restrict access to Azure AD administration portal.

View solution in original post