Cascades: Break-glass accounts + FIDO2 YubiKeys #26

Open
opened 2026-07-17 20:07:02 -07:00 by azcomputerguru · 1 comment

Discovered: 2026-07-01

Prerequisite for WS3 allow-list enforcement flip. Create breakglass1-csc@ and breakglass2-csc@ with FIDO2 YubiKeys. Tenant runs live block policies with no break-glass today.

**Discovered:** 2026-07-01 Prerequisite for WS3 allow-list enforcement flip. Create breakglass1-csc@ and breakglass2-csc@ with FIDO2 YubiKeys. Tenant runs live block policies with no break-glass today.
azcomputerguru added the P2-highclient-projectclient:cascadesassigned:mike labels 2026-07-17 20:07:03 -07:00
Author
Owner

Status check 2026-07-18: Not started. This is the prerequisite for WS3 (caregiver allow-list enforcement flip). Tenant currently runs live block policies with zero break-glass accounts. Requires Mike for PAA role removal from Tenant Admin SP.

Status check 2026-07-18: Not started. This is the prerequisite for WS3 (caregiver allow-list enforcement flip). Tenant currently runs live block policies with zero break-glass accounts. Requires Mike for PAA role removal from Tenant Admin SP.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: azcomputerguru/claudetools#26