Extending Tier 0 into Microsoft Entra ID
Experts Live Denmark 2027
← All sessions
Technical Session
60 min
Room 4-Floor 1-Max 49
Security
Expert (400)
Security
Zero Trust
Passkeys
Identity
Entra ID
Thursday 11 February 2027, 15:00–16:00
Speakers
- Kasper Norregaard
About this session
Classic AD tiering is still relevant, but Tier 0 no longer stops at the domain controllers. In a hybrid Microsoft environment, privileged access also lives in Microsoft Entra ID, Microsoft 365, Conditional Access, PIM, and cloud-based admin roles. In this session, we will look at how to extend the traditional Tier 0/1/2 model into the cloud using Entra ID Administrative Units, PIM, strong authentication, and Privileged Access Workstations. The goal is a practical admin model that reduces attack paths, limits lateral movement, and makes delegated administration safer across both on-prem AD and Microsoft 365.