File tree Expand file tree Collapse file tree 1 file changed +3
-4
lines changed Expand file tree Collapse file tree 1 file changed +3
-4
lines changed Original file line number Diff line number Diff line change @@ -29,12 +29,11 @@ Microsoft Entra Connect accounts like AD DS Connector account (also known as MSO
29
29
30
30
1 . Review the list of exposed entities to identify accounts with unsafe permissions. For example:
31
31
32
- ![ Screenshot of exposed entities.] (media/remove-unsafe-permissions-sensitive-entra-connect/Screenshot of exposed entities.png)
33
-
34
- If you click on "Click to expend" you can find more details about the granted permissions. For example:
35
- ![ Screenshot of excessive permissions.] (media/remove-unsafe-permissions-sensitive-entra-connect/Screenshot of excessive permissions.png)
32
+ :::image type="content" source="media/remove-unsafe-permissions-sensitive-entra-connect/screenshot-of-exposed-entities.png" alt-text="Screenshot of exposed entities":::
36
33
34
+ 1 . If you click on "Click to expend" you can find more details about the granted permissions. For example:
37
35
36
+ :::image type="content" source="media/remove-unsafe-permissions-sensitive-entra-connect/screenshot-of-excessive-permissions.png" alt-text="Screenshot of excessive permissions":::
38
37
39
38
1 . For each exposed account, remove problematic permissions that allow unprivileged accounts to takeover critical hybrid assets.
40
39
You can’t perform that action at this time.
0 commit comments