01 / Access Discovery
Reviewed Microsoft Entra ID security groups, owners, memberships, and known application assignments to establish a baseline.
NOCTURNE SYSTEMS // NS-IAM-002
IDENTITY GOVERNANCE IN ACTION
Access Reviews & Entitlement Remediation
01 // EXECUTIVE SUMMARY
Project Overview
This project demonstrates a simulated identity governance certification and controlled remediation process using Microsoft Entra ID security groups.
I examined existing group entitlements, developed a fictional access review scenario, introduced an excessive membership, documented a simulated revocation decision, and verified the membership change through Entra ID.
02 // METHODOLOGY
Access Certification Workflow
02 / Entitlement Assessment
Evaluated role-based access against a fictional helpdesk access policy, documenting governance observations and access review decisions.
03 / Controlled Violation
Added a dedicated test identity to the WayneHelpDesk security group to simulate excessive group membership.
04 / Simulated Certification
Documented a simulated resource-owner revocation decision after the test identity was found to lack a qualifying business justification.
05 / Remediation & Verification
Removed the test identity, verified its absence from group membership, and reviewed successful Entra ID group-management audit events.
03 // GOVERNANCE FINDINGS
What Was Identified?
The review covered administrative, departmental, and application security groups. It examined assigned ownership, membership appropriateness, and available entitlement information.
The controlled test identified a group membership that did not meet the fictional access policy. The simulated review decision was to revoke this membership.
RESULT // Test membership removed and absence verified.
The Entra ID audit trail also recorded successful membership addition and removal operations.
04 // SECURITY ANALYSIS
Least Privilege & Access Governance
Identity governance requires more than knowing which users belong to a group. Effective reviews also require clear business purposes, ownership, entitlement visibility, and defensible retain-or-revoke decisions.
The WayneHelpDesk enterprise application was a placeholder rather than a functioning application. This exercise verified security-group membership remediation, not application-side authorization enforcement.
05 // EVIDENCE ARCHIVE
Full Technical Report
Review the complete methodology, simulated access certification, governance observations, remediation, and sanitized evidence.
06 // LESSONS LEARNED
Key Takeaways
This project strengthened my understanding of entitlement reviews, access certification, least privilege, group ownership, audit evidence, and controlled access remediation.
Authorized lab exercise. Business policy, certification, and owner decision were simulated; actual Entra ID group membership changes were performed and verified.