Consultants often have elevated access to multiple customer environments, which makes them high-value targets for attackers. In today's threat landscape, attackers don't break in, but rather log in using stolen credentials, phishing, or token theft to impersonate trusted users.

This session will teach partners how to use Microsoft's Privileged Identity Management (PIM) to reduce the risk of identity-based attacks. They'll learn how to implement just-in-time access, approval workflows, and access reviews for Security Groups, which can be used to protect Business Central environments. We'll also explore why phishing-resistant authentication methods like Windows Hello for Business and passkeys are critical for protecting privileged roles.

By the end of this session, they'll understand:

* Why standing access, even for trusted consultants, is a security risk
* How attackers exploit identity-based weaknesses to gain access
* How to configure and operationalize PIM for Business Central with Security Groups
* How to communicate the value of PIM to stakeholders and customers