Digital identity guy. Product manager for Microsoft Entra and Azure Active Directory. Aerospace, automotive, and NFL football enthusiast. Husband and father.
Redmond, WA
Joined January 2014
- Tweets326
- Following68
- Followers1.8K
- Likes157
Stuart Kwan retweeted
🎉 Microsoft Entra Permissions Management is now generally available!
Remediate permission risks and ensure the security of your multicloud environment. Learn more: msft.it/6016bIZ1w #MicrosoftEntra
Stuart Kwan retweeted
Today's news: Now you can use Azure AD cloud based groups to manage access in your on-premises Windows Server AD! techcommunity.microsoft.com/…
Azure identity geeks: You can now view in the Azure portal the set of resources that are associated with a user-assigned managed identity, like which VMs are using the identity: docs.microsoft.com/en-us/azu…
Stuart Kwan retweeted
I’m over the moon to help launch Microsoft Entra, our new family of Identity and Access solutions that includes Azure AD, Entra Permissions Management (previously CloudKnox), Entra Verified ID and a new simplified admin portal experience microsoft.com/security/blog/…
Happy World Password Day!
I’m SO excited about today’s news! After 6+ years of effort, we have an open standard for passwordless authentication that Microsoft, Google and Apple (yes, even Apple!) have all agreed to build into their OS’s and browsers techcommunity.microsoft.com/…
You can now download all #AzureAD RBAC assignments using a button in the portal, instead of having to script this with PowerShell docs.microsoft.com/en-us/azu…
Dynamic membership for #AzureAd Admin Units now in preview! techcommunity.microsoft.com/…
Stuart Kwan retweeted
Today's news: Azure AD now supports custom RBAC roles for devices scoped to Admin Units. Awesome new way to assure least privileges for devices! techcommunity.microsoft.com/…
Kim was a transcendent figure in Identity. He literally changed the rules. I learned so much from him about technology and business, but also about humanity. I find myself learning from him to this day even without his being present. It is a shock to hear about his passing.
I think was the last time I saw Kim in person, on the keynote stage of @Identiverse 2019.
I love this picture as it epitomizes his role - when Kim spoke, the industry listened.
/cc @pamelarosiedee @annabellerings @ve7jtb @__b_c
New preview today of custom security attributes in #AzureAD! Use them in Attribute Based Access Control to simplify access to #AzureBlob, for example "grant read access if user.project == blob.project". More scenarios coming soon! techcommunity.microsoft.com/…
The tech area in which I work is in the background for most people. So I want to salute the groundbreaking work of my colleagues, which was "featured" on The Tonight Show. When late night is making fun of you, you know you're important!
I'm hiring! A Principal Program Manager to lead a team defining consistent Role Based Access Control across the Microsoft cloud. It's a people management position. careers.microsoft.com/us/en/…
Stuart Kwan retweeted
Assigning Azure AD roles to cloud groups is generally available now. isAssignableToRole attribute on group object is in Graph v1.0 and latest version of AzureAD PowerShell.
Seemingly simple, but amazingly complex to build. But finally...
docs.microsoft.com/en-us/azu…
@StuartKwan
Introducing Attribute Based Access Control in Azure! First stop, ABAC for Azure Storage. techcommunity.microsoft.com/…
Stuart Kwan retweeted
Stay tuned for some pretty cool @azuread news coming out of #MSIgnite in the next few days! Make sure to check out these sessions (for free!): techcommunity.microsoft.com/…
More new built-in roles for delegating admin in #azuread
2 new Azure AD roles are now available - Auth Policy Admin and Domain Name Admin. Now you do not need Global Admin to manage tenant-wide MFA settings or domain names.
@StuartKwan, @TurnOnMfa
docs.microsoft.com/en-us/azu…
docs.microsoft.com/en-us/azu…
ALT Azure AD portal UX showing Auth Policy Admin and Domain Name Admin in Roles & admin blade.
Stuart Kwan retweeted
Slowly #AzureAD RBAC gets better and better. Good to finally see improvement here.
Thanks @abhijeetksinha_ @StuartKwan 👏
Ability to assign @azuread custom roles and admin unit scoped roles to cloud groups is now available in public preview. This completes the story for cloud groups.
Next step is supporting on- prem groups. Stay tuned!
@StuartKwan , @ShaunLiu1
Stuart Kwan retweeted
Super fun to get some of the original Directory Expert's Conference players back together for a look backward at DEC (including the origins of the annual Wook Lee Memorial Challenge) and forward to HIP next week! #activedirectory #sysadmin #hip2020
Sit back and listen to where HIP all began...📖

Our Guests:
- @gkirkpatrick, @hipconf co-founder
- @StuartKwan, Principal Program Manager at #Microsoft
- Wook Lee, Directory Services Architect at Hewlett Packard Enterprise
🎧 bit.ly/37aKlYY
Hosted by @shorinsean
Stuart Kwan retweeted
Today's news: We're currently rolling out Conditional Access and Identity Protection for Azure AD B2C while also continuing to simplify and align Azure AD pricing. techcommunity.microsoft.com/…
Stuart Kwan retweeted
I know MANY of you have been waiting for this: You can now assign groups to roles in #AzureAD. Big win for automating role management at scale! techcommunity.microsoft.com/…