Skip to content
Read-onlyDemo · synthetic dataYou are touring Permafrost with a synthetic tenant. Nothing here is a real customer, and no changes can be made.
Start freeLeave demo
Permafrost EPM
Privilege posture · Glacier Bay Robotics

Privilege posture across your connected tenants.

49 tracked identities · 13 privileged · scored on Unified Principal Risk across all of this customer's connected tenants.

Open critical / high findings
6open
2 critical4 high·5 medium / low not shown
Avg UPR
39/100
Blast-radius-weighted Unified Principal Risk · higher = more exploitable
Avg Unused Permission %
30.5/100
Mean across tracked identities · higher = more unused standing privilege
Privileged identities
13tracked
out of 49 total · 1 PIM-eligible only
Risky privileged principals
0

Privileged principals with an active Entra ID Protection risk signal — investigate first.

Identity composition
  • Users26
  • Service Principals5
  • Managed Identities6
  • Agent Identities3

13 privileged · 14 non-human · 40 total

Non-human identities

Service principals, managed identities, and Entra agent identities across all of this customer's connected tenants.

16non-human identities

6 service principals · 6 managed identities · 4 agent identities

2 dormant candidates (no sign-in in 180+ days).

0.6:1NHI:human

28 humans · industry avg 50:1–144:1

Open NHI inventory
Top inherited privileged grant

The highest-risk privileged role assigned at a management-group or subscription scope across this customer's connected tenants. Every scope beneath it inherits this grant.

critical · 95
Diego VasquezUser
Owner
dddddddd-0000-4000-8000-00000000abcdSubscription
inherits to every resource group in this subscription
First finding · critical
critical

Permanent Owner over the production subscription

Diego Vasquez holds a permanent Owner assignment exercised on only 19% of its granted actions.

Diego VasquezUnused permission % 84.0
Open finding
PIM posture score

Just-in-time vs. permanent privilege across high-privilege identities.

13%just-in-time coverage

Standing-privilege heavy — adopt PIM eligibility

Permanent
7
PIM-eligible
1
Open PIM dashboard
Permission usage · 90d

Azure RBAC effective permissions vs what was exercised in the last 90 days. Entra directory roles surface in the Roles list, not here.

19 Azure RBAC role assignments observed but permission flattening produced zero effective rows. Try a fresh sync from Settings; if this persists, contact support — this is a Permafrost-side issue, not a tenant configuration issue.

Recent findings

Latest over-privilege detections · 11 open

View all
Denied escalation attempts · 7d

Failed allowlisted ARM operations attributed to tracked identities across all of this customer's connected tenants. Each denied attempt is a probe pattern — review the identity timeline for context.

0denied attempts

No denied escalation attempts in the last 7 days.

Service principal credential remediations

Open credential-revocation recommendations across all of this customer's connected tenants. Each row is a stale or rotated-out service-principal credential that should be removed from the directory.

0open recommendations

No stale service-principal credentials detected yet. Permafrost will surface remediation candidates as it observes credential rotations.

Open incidents

Permission-posture pattern matches across this customer's priv-set in the last 30 days.

0pattern matches · 0 high, 0 medium
Open incidents