Entra ID

Azure AD (Entra ID) experiences frequent outages, which critically impacts all Azure and Office 365 services that depend on it. This is treated as an acceptable risk despite the widespread impact.

If user accounts with privileged access are compromised or permanent privileged access is granted, businesses face security risks. Managing and limiting privilege duration and visibility is challenging without proper tools.

Many organizations lock down Azure tenants with whitelist-based resource and operation controls on administrator advice. This prevents developers from gaining practical Azure experience through trial-and-error, increases time-to-market, and reduces the platform's developer benefits despite Azure being designed as a developer-first cloud.

Setting up correct access controls and permissions for resources is tricky, requiring balance between security and usability. Documentation assumes administrative privileges, leaving non-admins without clear guidance on permission discovery and processes.