These labs cover Least privilege in Microsoft Entra ID. Work through them in the order shown. Each one lists its prerequisites, the PowerShell you will run, and how to check the change worked.
New to the topic? Read the lab prerequisites and IAM Foundations first.
About Least privilege labs
How many Least privilege labs are there?
There is 1 Least privilege lab on Identity Bytes Labs, taking about 1 hours in total.
Where should I start with Least privilege?
Start with "Least Privilege on Linux with sudo: Rules, Logging and Review". Replace blanket sudo ALL access on Linux with command-specific rules, log every privileged command, record sessions and audit who can run what.
Do I need a production tenant?
No. Every lab is designed for a free, disposable Microsoft Entra test tenant. Never run lab steps against an environment people depend on.