Simplify Active Directory Permissions Handling with Delegation Manager

Wiz introduced Custom Roles, extending its RBAC with granular, business-aligned permissions, visibility into gaps and missing permissions, and change tracking for built-in roles.

Poorly managed AD ACLs enable domain escalation. The post explains a tiered delegation model—Tier 0 domain controllers, Tier 1 servers, Tier 2 user administration—to enforce least privilege.

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

A Semperis checklist for readying the identity fabric for agentic AI: assess identity posture, replace standing access with just-in-time permissions, lock down Tier 0 and rehearse recovery.

Semperis practice checkpoint two wires up the Entra ID agent permission model: direct app-only roles on the agent identity plus inheritable delegated permissions granted at the blueprint level.

Few organizations have visibility into who holds what rights across hybrid environments. The post covers identity security posture management and why scoring needs context.