(38) Restrict Access to Azure AD Administration Portal

To ensure that users cannot access Azure AD Adminisration portal, by default the option to restrict access to Azure AD Portal is set to No. It is recommended to set to Yes and restrict user access to Azure AD for non-administrator acocunts.

The following steps will be covered below:

Step 1: Restrict access to Azure AD Administration Portal

Step 2: Verify no access to Azure AD Administration Portal

Step 1: Restrict access to Azure AD Administration Portal 1. Navigate to https://portal.azure.com, ensure the account you are logging in has Global Administrator rights.

2. In the search field, select or enter in Azure Active Directory.

3. Under Administration Portal: Restrict access to Azure AD administration portal, select Yes. Then click Save.

Step 2: Verify no access to Azure AD Administration Portal

1. Navigate to https://portal.azure.com, login with a user account. In this case, I have logged in with my UPN: bmah@soeintunedevice.org

2. In the search field, select or enter in Azure Active Directory.

3. As soon as I click on Azure Active Directory, it displays "You do not have access"