Cloud Identity Integration

Azure RBAC

Connect TigerIdentity to Azure Active Directory and Azure RBAC for unified cloud identity management, role governance, and just-in-time access control.

Capabilities

Key features

Azure AD Sync

Automatically sync users, groups, and service principals from Azure Active Directory.

RBAC Role Discovery

Discover and map Azure RBAC roles, custom roles, and role assignments across subscriptions.

Identity Graph

Map Azure identities to your unified graph for cross-platform access governance.

Event Streaming

Subscribe to Azure Activity Log events for real-time visibility into role assignments.

PIM Integration

Integrate with Azure Privileged Identity Management for just-in-time role activation.

Multi-Tenant Support

Manage identities across multiple Azure tenants and subscriptions from a single platform.

How it works

Connect Azure RBAC in four steps.

01

Connect

Configure the connector with Azure service principal credentials and tenant information.

02

Sync

TigerIdentity syncs users, groups, role definitions, and role assignments across subscriptions.

03

Enforce Policies

Use Azure identity and role data in TigerIdentity policies for unified access governance.

Cloud Identity Integration

Real-time identity signals from Azure RBAC.

Every event, action, and change from Azure RBAC feeds the TigerIdentity policy engine and TIDR baseline in real time.

< 50 ms

Cloud Identity Integration

Setup

Configuration example

connector.yaml
connector:
  type: azure-rbac
  name: "azure-production"

  config:
    tenant_id: "${AZURE_TENANT_ID}"
    client_id: "${AZURE_CLIENT_ID}"
    client_secret: "${AZURE_CLIENT_SECRET}"

  sync:
    users: true
    groups: true
    service_principals: true
    role_assignments: true
    role_definitions: true
    subscriptions: true

  events:
    - microsoft.authorization.roleAssignments.write
    - microsoft.authorization.roleAssignments.delete
    - microsoft.authorization.roleDefinitions.write

  mapping:
    user_attributes:
      - azure: userPrincipalName
        tiger: email
      - azure: department
        tiger: department
      - azure: manager
        tiger: reports_to
Use cases

Common use cases

Cloud RBAC Governance

Centralize Azure RBAC role management with TigerIdentity policies for consistent access control.

Just-In-Time Azure Access

Grant temporary Azure role assignments based on dynamic context and approval workflows.

Cross-Cloud Identity

Unify Azure AD identities with AWS IAM and GCP identities for multi-cloud governance.

Compliance Reporting

Generate audit trails of Azure role assignments and privilege escalations.

Ready to connect Azure RBAC?

See how TigerIdentity integrates with your Azure RBAC environment in a personalized demo.