Roast profile R-04
Entra & Security
Conditional Access, Purview, retention, compliance.
Light — Decision
- Deleting data nobody wants to deleteRetention periods rarely fail because of Purview. They fail because no named person makes the decision — and here is how to change that.
Medium — Concept
- Priority Cleanup: when Copilot hygiene meets legal holdPriority Cleanup deletes despite retention and eDiscovery holds, now even permanently. Who may use it, who must approve and what to check first?
- Conditional Access with a sense of proportion, not full throttleEvery additional policy increases security and lowers acceptance. Where the line is, how to justify it and what belongs in the break-glass account.
Dark — Implementation
- Passkeys by default: Microsoft's SMS MFA ends on 1 February 2027Microsoft ends SMS and voice for MFA and SSPR in Entra. What applies from February 2027, who is affected and how to move users without a smartphone.
- Retention policy is not deleting — four common causesSimulation mode, legal hold, label beats policy, delayed application. With the PowerShell calls to check all four, one after another, in order.