You can check the change history of an Azure security group with the Active Roles Web Interface. This is useful if you want to view the list of changes that occurred to the selected Azure security group, such as:
-
Membership changes (that is, added or removed members).
-
Membership type changes (that is, whether the group has been set to assigned or dynamic membership).
NOTE: The Change History option of the Active Roles Web Interface lists only group modifications that were performed in Active Roles. It does not list the changes of the group that were performed outside Active Roles, for example in Azure Portal.
To view the change history of an Azure security group
-
Navigate to Directory Management > Tree > Azure > <azure-tenant-name> > Security Groups.
The list of existing Azure security groups in the selected Azure tenant appears.
-
Select the group whose change history you want to check.
-
In the right-side pane, click Change History.
The Change History page then appears, with the newest change of the group listed at the top of the page.
-
To close the Change History window, click any Tree node, or any option listed in the right-side pane.
You can use the Active Roles Web Interface to delete an Azure security group from an Azure tenant. This is typically required when the group becomes redundant or is otherwise no longer required, for example because of a security policy change.
|
CAUTION: Deleting an Azure security group is a destructive operation that will delete the group from the Azure tenant on the Azure Portal as well. |
To delete an Azure security group
-
Navigate to Directory Management > Tree > Azure > <azure-tenant-name> > Security Groups.
The list of existing Azure security groups in the selected Azure tenant appears.
-
Select the group that you want to delete.
-
In the right-side pane, click Delete.
-
A confirmation dialog appears. To confirm the deletion of the group, click Yes.
The selected Azure security group is then deleted from the Azure tenant.
Active Roles supports managing cloud-only Azure users. Using the Active Roles Web Interface, you can:
Create, view, update, or delete cloud-only Azure users in the Azure AD of your organization.
-
Check the Azure membership details, Azure properties, Exchange Online properties, or the change history of Azure users.
-
Perform administrative operations on Azure users, such as rename them or reset their password.
When you create a new cloud-only Azure user for your organization, you must:
-
Specify a User Principal Name (UPN) and password for the Azure user.
-
Select the organization domain where the Azure user will be located within the Azure tenant.
To view cloud-only Azure user information, you can use the Active Roles Web Interface.
To view cloud-only Azure user
- On the Active Roles Web Interface navigation bar, click Directory Management.
-
On the Views tab in the Browse pane, click Azure > <Azure tenant> > Azure Users.
The Azure Users page is displayed and lists the Azure users that are available in Azure.
NOTE: Active Roles lists the available cloud-only Azure users, Azure guest users, and Azure contacts on the Active Roles Web Interface with the following restrictions:
-
Active Roles can initially list 999 items.
-
The items listed in the list have a sliding expiry of 8 hours, after which the objects that have not been accessed will be flushed.
-
Whenever you perform a search in the list, Active Roles will always fetch the list of objects from Azure to update the cache.