Skip to main content
Microsoft Security

Microsoft Entra Permissions Management

One unified solution to manage the permissions of any identity across multicloud infrastructure.

A person standing at their desk and working.

Reimagine secure access with Microsoft Entra

New event date: Join this free digital event on July 11 to hear about the latest identity and access innovations and how to strengthen your defenses with Microsoft Entra.

Discover, remediate, and monitor permission risks for any identity or resource

Microsoft Entra Permissions Management is a cloud infrastructure entitlement management (CIEM) product that provides comprehensive visibility and control over permissions for any identity and any resource in Microsoft Azure, Amazon Web Services (AWS) and Google Cloud Platform (GCP).

Get full visibility

Discover what resources every identity is accessing across your cloud platforms.

Automate the principle of least privilege

Use usage analytics to ensure identities have the right permissions at the right time.

Unify cloud access policies

Implement consistent security policies across your cloud infrastructure.

Be more efficient

Save up to 60 percent by using Microsoft Security rather than multiple point solutions.1

Reduce your security and compliance costs with Microsoft Security by up to 60 percent. Microsoft Security costs $24 per user versus other vendors’ costs of $63 per user.

Watch the video

Securing Multicloud Permissions with Microsoft Entra Permissions Management.

Manage your multicloud infrastructure

Discover all cloud permissions

Get comprehensive and multidimensional visibility into actions performed by any identity on any resource across your cloud infrastructures.

Learn more about viewing analytic information with the Analytics dashboard.

Evaluate your permission risks

Assess permission risks by evaluating the gap between permissions granted and permissions used.

Learn more about viewing roles/policies and requests for permission in the Remediation dashboard.

Manage permissions and access

Right-size permissions, grant permissions on demand, and automate just-in-time access.

Learn more about viewing information about activity triggers.

Monitor permissions continuously

Detect anomalous activities with machine learning-powered alerts and generate detailed forensic reports.

Back to tabs

Navigate multicloud with an integrated CIEM solution

Discover how Microsoft Entra Permissions Management helps you improve your security posture by ensuring the principle of least privilege across identities and resources in your IaaS infrastructure.

A diagram showing how Microsoft Entra Permissions Management detects, right-sizes, and monitors unused and excessive permissions and enables Zero Trust security through least privilege access in Microsoft Azure, AWS, and GCP.

Microsoft Entra Permissions Management

Originally starting from $10.40 now starting from $10.40

$10.40 $10.40

resource/month

  • Permissions Management allows you to:

  • Get a multi-dimensional view of your risk by assess identities, permissions and resources.

  • Automate least privilege policy enforcement consistently in your entire multicloud infrastructure.

  • Prevent data breaches caused by misuse and malicious exploitation of permissions with anomaly and outlier detection.

  • A billable resource is defined as a cloud service that uses compute or memory. Permissions Management supports all resources across Amazon Web Services, Microsoft Azure, and Google Cloud Platform, but only requires licenses for billable resources per cloud provider. Learn more.

  • Free 45-day trial: try Permissions Management for free and run a risk assessment to identify the top permission risks across your multicloud infrastructure.

2023 State of Cloud Permissions Risks Report

Gain insights into mitigating the top identity and permissions risks across multicloud environments in our new 2023 State of Cloud Permissions Risks Report.

A person using a tablet

More from the Microsoft Entra family of products

Unify your multicloud identity and access solutions to secure access for a connected world.

A person wearing a headset sitting at their desk and holding up a mobile phone.

Microsoft Entra Verified ID

Create, issue, and verify privacy-respecting decentralized identity credentials with an identity verification solution that helps you enable more secure interactions with anyone or anything.

Two people in a meeting room on a video call with another team being displayed on a large screen on the wall.

Azure Active Directory

Safeguard your organization with the Microsoft Entra identity and access management solution that connects people to their apps, devices, and data.

A person looking down and smiling at a tablet

Microsoft Entra Workload Identities

Manage and secure identities for digital workloads, such as apps and services. Control their access to cloud resources with risk-based policies and enforcement of least-privileged access.

A person working at their desk

Microsoft Entra Identity Governance

Simplify operations, meet regulatory requirements, and consolidate multiple point solutions with a complete solution across on-premises and cloud-based user directories.

Additional resources

Video

Permissions Management Overview Video

Secure Multicloud Permissions with Permissions Management.

Documentation

Dive deeper into the product

Get technical details on capabilities and deployment guidance for Microsoft Entra Permissions Management.

Glossary

Key Permissions Management Terms

Learn more about Permissions Management Terms and their Impact in Multicloud Environments.

Blog

Stay up to date

Get product news, configuration guidance, product instructions, and tips.

Frequently asked questions

  • Cloud infrastructure entitlement management (CIEM) is the next generation of solutions for managing permissions. CIEM provides visibility into all actions performed by all identities, enforces the principle of least privilege, and continuously monitors for permission risks across multiple clouds.

  • Cloud permissions give identities the ability to perform an action on a resource across AWS, Azure, or GCP.

  • When building and supporting a Zero Trust foundation, the principle of least privilege is one of the essential pillars to lay this foundation. Maintaining least privilege means that identities are provisioned with the least privileges they need to complete their day-to-day operations. Considering the explosion of permissions and identities across cloud infrastructures, enforcing the principle of least privilege manually has become almost impossible.

  • Permissions Management currently supports the three major public clouds: Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure.

Protect everything

Make your future more secure. Explore your security options today.

Follow Microsoft