『M365.FM - Modern work, security, and productivity with Microsoft 365』のカバーアート

M365.FM - Modern work, security, and productivity with Microsoft 365

M365.FM - Modern work, security, and productivity with Microsoft 365

著者： Mirko Peters - Founder of m365.fm m365.show and m365con.net
無料で聴く

Welcome to the M365.FM — your essential podcast for everything Microsoft 365, Azure, and beyond. Join us as we explore the latest developments across Power BI, Power Platform, Microsoft Teams, Viva, Fabric, Purview, Security, and the entire Microsoft ecosystem. Each episode delivers expert insights, real-world use cases, best practices, and interviews with industry leaders to help you stay ahead in the fast-moving world of cloud, collaboration, and data innovation. Whether you're an IT professional, business leader, developer, or data enthusiast, the M365.FM brings the knowledge, trends, and strategies you need to thrive in the modern digital workplace. Tune in, level up, and make the most of everything Microsoft has to offer. M365.FM is part of the M365-Show Network.

Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support.Copyright Mirko Peters / m365.fm - Part of the m365.show Network - News, tips, and best practices for Microsoft 365 admins 政治・政府 毎時
エピソード
  • Global Secure Access - Simply Explained

    Global Secure Access - Simply Explained
    2026/08/06
    The way people work has fundamentally changed. Employees now access business applications from home offices, airports, customer sites, coffee shops, and mobile devices instead of sitting inside a corporate network. Traditional VPNs were designed for an era when applications lived inside company data centers and network boundaries provided the primary layer of security. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Microsoft Entra Global Secure Access (GSA) in plain English, showing how Microsoft replaces broad network connectivity with identity-driven Zero Trust access that grants users access only to the specific applications and services they need.UNDERSTANDING MICROSOFT ENTRA GLOBAL SECURE ACCESSMicrosoft Entra Global Secure Access is Microsoft's cloud-delivered Security Service Edge (SSE) platform that secures access to both private enterprise applications and public internet resources. Instead of assuming that anyone connected to the company network should be trusted, Global Secure Access evaluates every connection using Microsoft Entra ID, Conditional Access, device compliance, user identity, application context, and real-time security signals. This Zero Trust approach continuously validates every request, helping organizations reduce lateral movement, simplify remote access, and strengthen security across hybrid work environments.MICROSOFT ENTRA PRIVATE ACCESS: THE MODERN VPN REPLACEMENTMicrosoft Entra Private Access introduces Zero Trust Network Access (ZTNA) for internal business applications without exposing entire corporate networks. Rather than connecting users to broad network segments, Private Access creates secure, identity-based connections directly to specific applications, file shares, remote desktops, databases, and on-premises services. The episode explains how Private Access connectors securely bridge internal resources to Microsoft Entra without requiring public exposure while allowing organizations to replace complex VPN infrastructures with application-centric access policies. Contractors, remote workers, consultants, and hybrid employees receive only the permissions required for their assigned business tasks, dramatically reducing unnecessary network exposure.MICROSOFT ENTRA INTERNET ACCESS AND SECURE WEB PROTECTIONEnterprise security extends beyond private applications to the public internet. Microsoft Entra Internet Access functions as a cloud-based Secure Web Gateway (SWG), applying organizational security policies before users access websites, SaaS applications, AI services, and cloud platforms. The discussion explores URL filtering, SaaS visibility, AI governance, Microsoft Purview integration, TLS inspection, file protection, and cloud application discovery. Organizations gain greater visibility into internet usage while protecting sensitive business information from unauthorized uploads, malicious websites, shadow IT, and emerging AI services that may introduce compliance or data protection risks.ZERO TRUST IDENTITY, CONDITIONAL ACCESS, AND CONTINUOUS VERIFICATIONIdentity sits at the center of every access decision. Microsoft Entra ID verifies user identity while Conditional Access evaluates additional factors such as device compliance, Microsoft Intune management, Microsoft Defender security signals, multifactor authentication, user risk, session risk, and organizational policies. Instead of granting permanent trust after a VPN connection is established, Global Secure Access continuously evaluates whether users should maintain access based on changing conditions throughout their session. This adaptive security model allows organizations to respond immediately when devices become non-compliant, accounts show suspicious behavior, or security risks increase.BUILDING A MODERN ZERO TRUST ACCESS STRATEGYMicrosoft Entra Global Secure Access represents a fundamental shift from network-centric security toward identity-first access control. By combining Microsoft Entra Private Access, Microsoft Entra Internet Access, Conditional Access, Microsoft Intune, Microsoft Defender, Microsoft Purview, Zero Trust principles, and Security Service Edge architecture, organizations can secure both private applications and internet traffic through a unified cloud platform. Businesses beginning their Zero Trust journey should start with a focused pilot involving a single user group and business application before gradually expanding secure identity-based access across the enterprise. The result is a simpler, more scalable, and significantly more secure approach to modern hybrid work.Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support.
    続きを読む 一部表示
    17 分
  • Entra Workload Identities - Simply Explained

    Entra Workload Identities - Simply Explained
    2026/08/05
    Modern cloud environments are no longer accessed only by people. Applications, automation workflows, Azure services, DevOps pipelines, AI agents, and background jobs all require secure access to business resources without relying on human interaction. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Microsoft Entra Workload Identities in plain English, showing how software securely authenticates to Microsoft 365, Azure, Microsoft Graph, and enterprise services without storing usernames and passwords inside code. Whether you're an Azure administrator, cloud architect, developer, DevOps engineer, or Microsoft consultant, this episode provides a practical foundation for understanding secure application authentication.UNDERSTANDING USER IDENTITIES VS WORKLOAD IDENTITIESMicrosoft Entra ID manages both human users and software identities, but they operate very differently. Human identities authenticate using passwords, passkeys, Windows Hello, and multi-factor authentication, while applications require non-interactive authentication methods that operate continuously without user involvement. Workload identities provide applications with their own unique digital identity, allowing Microsoft Entra ID to authenticate software independently from human accounts. This separation improves security, eliminates shared service accounts, increases auditing capabilities, and allows every application, automation, or AI workload to receive only the permissions required for its specific business purpose.APP REGISTRATIONS, SERVICE PRINCIPALS, AND MANAGED IDENTITIES EXPLAINEDThree Microsoft Entra concepts frequently confuse administrators: Application Registrations, Service Principals, and Managed Identities. This episode clearly explains the relationship between these components. Application Registrations define the global identity of an application and describe the permissions it may request. Service Principals represent the application's local identity within an individual Microsoft Entra tenant, where administrators grant permissions and enforce security controls. Managed Identities extend this model by allowing Azure resources such as Azure Functions, Logic Apps, Virtual Machines, and App Services to authenticate automatically without developers managing secrets, passwords, or certificates. Together, these identity models create the secure authentication foundation for modern cloud-native applications.HOW MANAGED IDENTITIES ELIMINATE PASSWORDSOne of the most significant security improvements in Microsoft Azure is the ability to authenticate workloads without embedding credentials inside applications. Instead of storing passwords, client secrets, or connection strings within source code, Azure resources using Managed Identities request short-lived access tokens directly from Microsoft Entra ID. The episode explains how authentication and authorization work together, how Azure Key Vault integrates with Managed Identities, and why temporary access tokens dramatically reduce the risks associated with credential theft, secret leakage, source code exposure, and long-lived authentication credentials.SECURING WORKLOAD IDENTITIES IN MICROSOFT AZUREWorkload identities require governance just like privileged user accounts. The discussion explores the importance of least privilege access, Conditional Access for workload identities, workload identity federation, certificate-based authentication, Microsoft Entra ID Protection, logging, monitoring, lifecycle management, and ownership. Mirko explains why every workload identity should have a clearly assigned owner, minimal permissions, continuous monitoring, and regular security reviews. Organizations that neglect application identities often leave behind unused service principals, forgotten secrets, excessive permissions, and automation that continues operating long after the original project has ended.CHOOSING THE RIGHT IDENTITY STRATEGY FOR EVERY WORKLOADSelecting the correct authentication model depends largely on where the application executes. Azure-hosted services should generally use System-Assigned or User-Assigned Managed Identities whenever possible. Applications running outside Azure, including GitHub Actions and external cloud platforms, benefit from Workload Identity Federation instead of long-lived client secrets. Custom enterprise applications often require Application Registrations and Service Principals, while certificates provide a more secure alternative to client secrets when Managed Identities are unavailable. By combining Microsoft Entra Workload Identities, Azure Key Vault, Microsoft Graph, Zero Trust principles, and least privilege access, organizations can significantly strengthen application security while simplifying authentication across Microsoft 365 and Azure environments.Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support.
    続きを読む 一部表示
    17 分
  • Azure Platform Engineering, Azure Landing Zones, Cloud Adoption Framework & Building Enterprise Cloud Platforms Jev Suchoi [MVP]

    Azure Platform Engineering, Azure Landing Zones, Cloud Adoption Framework & Building Enterprise Cloud Platforms Jev Suchoi [MVP]
    2026/08/05
    Moving workloads into Microsoft Azure is only the beginning of a successful cloud journey. Building a cloud platform that is secure, scalable, automated, and developer-friendly requires a completely different mindset. In this episode of M365.FM, Microsoft MVP Jev Suchoi explains how Platform Engineering helps organizations build reusable cloud foundations that enable innovation while maintaining governance, security, and operational excellence. The discussion explores Azure Landing Zones, Infrastructure as Code, Cloud Adoption Framework, DevOps, automation, and modern enterprise cloud architecture through practical real-world experience.

    UNDERSTANDING AZURE LANDING ZONES AND CLOUD FOUNDATIONS
    Azure Landing Zones provide the standardized architecture that allows organizations to deploy workloads consistently across Microsoft Azure. Jev explains how Landing Zones establish networking, identity, security, governance, subscriptions, policies, and management services before application teams begin deploying workloads. Rather than treating Azure like a traditional datacenter, organizations should build cloud-native platforms designed for scalability, automation, and self-service. The conversation also explains why Microsoft's Enterprise Landing Zone architecture serves as an excellent starting point while still requiring customization for individual business requirements.

    MICROSOFT CLOUD ADOPTION FRAMEWORK AND WELL-ARCHITECTED DESIGN
    The Microsoft Cloud Adoption Framework offers far more than technical guidance. It provides a comprehensive roadmap covering business strategy, governance, security, organizational change, operations, and cloud architecture. Jev discusses how organizations should gradually introduce the framework without overwhelming teams, allowing architects, operations teams, and security specialists to focus on the areas most relevant to their roles. The episode also explores how the Azure Well-Architected Framework complements Cloud Adoption Framework by helping architects design highly available, secure, reliable, performant, and cost-optimized cloud workloads.

    AUTOMATION, INFRASTRUCTURE AS CODE, AND MODERN GOVERNANCE
    Automation sits at the center of every successful Azure platform. Infrastructure as Code enables organizations to deploy consistent environments, improve compliance, reduce configuration drift, and implement security earlier in the deployment lifecycle. Jev explains how Bicep, Terraform, Azure Verified Modules, Azure Policy, and automated guardrails allow platform teams to create repeatable cloud environments while reducing operational risk. Listeners also learn how proactive governance replaces traditional reactive operations through policy enforcement, remediation, monitoring, and standardized deployment practices.

    BUILDING SELF-SERVICE PLATFORMS DEVELOPERS LOVE
    Platform Engineering is ultimately about creating internal platforms that enable development teams to deliver business value faster. Instead of becoming operational bottlenecks, platform teams should provide self-service capabilities, reusable templates, deployment pipelines, standardized environments, and automated security controls. Jev explains why developers should be viewed as customers of the platform and how organizations can balance flexibility with governance by providing clear guardrails rather than unnecessary restrictions. The discussion also covers GitHub, Azure DevOps, Internal Developer Platforms, and why successful platforms focus on enabling developers instead of competing with the Azure Portal.

    AI, CLOUD OPERATIONS, AND THE FUTURE OF ENTERPRISE AZURE
    Artificial Intelligence is rapidly changing the daily work of cloud engineers and platform architects. Jev shares how GitHub Copilot accelerates Infrastructure as Code development, improves productivity, and assists experienced engineers while emphasizing the importance of architectural knowledge and critical thinking. The conversation concludes with practical advice on cloud adoption, governance, platform engineering, Azure security, automation, developer experience, and why organizations should automate repetitive tasks while allowing engineers to focus on solving complex business challenges. The key takeaway is simple yet powerful: automate the boring work so people can concentrate on innovation.

    Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support.
    続きを読む 一部表示
    1 時間 3 分
adbl_web_anon_alc_button_suppression_t1
まだレビューはありません