Blog
Articles
Insights on Entra ID, ABAC, license management, and IT service desk automation.
ITSM maturity assessment: where does your service desk stand?
A practical maturity model for your service desk, from reactive to rule-driven. Find out where you stand, recognize the next level, and see how to move up a step.
Zero-Touch Apple Deployment with Intune & DEP
With Apple Automated Device Enrollment and Microsoft Intune, a Mac or iPhone gets itself ready out of the box. Here is how zero-touch onboarding works in a Microsoft environment.
Dynamic groups, an IGA platform, or ServiceChanger: when to choose what
You can manage access in Microsoft with native Entra dynamic groups, a full IGA platform, or a rules layer like ServiceChanger. Here are the three approaches, their limits, and when each fits.
ITIL request fulfilment without the ticket: a Microsoft approach
In ITIL, request fulfilment handles standard service requests. Many of those are about access. Here is how to map request fulfilment to attribute-driven assignment in Entra ID.
Scale your service desk without growing headcount
Ticket volume grows faster than budget. Here is how to absorb the growth by automating repetitive identity and license work, instead of adding a pair of hands every time.
Shift-left on the service desk: what to automate first
Shift-left means moving work to the earliest, cheapest point in the chain. Here is how to apply that to a Microsoft service desk: move repeatable access and license work to self-service and rules.
Reclaim unused Microsoft 365 licenses with Entra sign-in activity
Assigned licenses tell you nothing about usage. The real sign-in activity in Entra ID shows you licenses nobody uses. Here is how to build a 90-day policy and a business case around it.
Access governance and the audit trail as evidence for NIS2 and ISO 27001
How attribute-driven access governance produces reproducible least privilege and a who-had-what-when audit trail that auditors can use as evidence for NIS2 and ISO 27001. Evidence, not certification.
Find inactive users in Entra by last sign-in (and what it saves)
The signInActivity field in Entra ID lets you find accounts that have not signed in for months. Here is how the query works, what to watch for (P1, 24-hour delay), and what it saves in licenses.
Entra ID vs Active Directory in 2026
Active Directory still runs in many places while Entra ID is becoming the standard. The state of play in 2026: what to do with your AD, when to move, what to keep hybrid.
RBAC vs ABAC: when to pick which
RBAC is simple and works up to a certain size. ABAC scales better but needs more setup. This is the practical decision point: when do you move from RBAC to ABAC?
Automate the service desk: stop handling access requests by hand
Access requests are a large share of service desk work and almost all of it is manual. Here is how to automate group membership in the Microsoft environment with rules, instead of per ticket.
Self-service access portals: the business case
A self-service access portal cuts tickets, lead time, and manager frustration. Real numbers and what you need to have in place for it to work.
IT offboarding checklist: what you can automate
The 15 steps of a complete IT offboarding in Microsoft Entra ID. Which you should automate, which you keep manual, and why the order matters.
Microsoft 365 license management: manual vs automated
Microsoft 365 licenses grow quietly until you don't remember which ones you're paying for. How to automate the full lifecycle and what it saves.
Automating Entra ID group membership with attributes
How to let Entra ID group membership follow HR attributes like job title, department, and location automatically. From concept to working dynamic groups.
Is Microsoft Intune an ITAM tool? MDM vs IT asset management
Intune manages devices, but that is not the same as IT asset management. This is the difference between MDM and ITAM, what Intune does and does not cover, and where the gap sits.
What is ABAC in Microsoft Entra ID?
ABAC (Attribute-Based Access Control) determines access based on attributes like job title, department, or location. How it works in Entra ID, how it differs from RBAC, and when to use it.
Dynamic Groups vs Static Groups in Entra ID
Static groups you fill by hand, dynamic groups fill themselves with a rule. This is the decision guide: when to pick which, plus the limits Microsoft does not advertise loudly.
Automate hybrid Active Directory with a PowerShell runbook
Drive on-prem AD groups from attributes in a hybrid environment. Here is how it works with Entra ID dynamic groups, a PowerShell runbook on a hybrid worker, and Entra Connect under one rule model.
Implementing ABAC in Entra ID: a step-by-step with dynamic groups
A practical step-by-step for rolling out ABAC in Entra ID with dynamic groups: from your first membership rules to a working model, with limits and pitfalls.
From ITSM to ESM: bringing service management beyond IT
What ESM is, how to extend service management from IT to HR and facilities, how to grow your maturity, and when a consultancy partner pays off.
AI on the service desk: let tickets resolve themselves
When and how to let tickets resolve themselves with AI. What AI agents take off your queue, the role of a knowledge base, classification and routing, and how to start safely.
Chain monitoring with a traffic light: one status the whole organisation gets
Chain monitoring on the traffic light principle: draw your IT chain, overlay your existing tools, and share a green, amber or red status everyone understands, with no login.