Skip to content
  • Home
  • About Me
deniscooper.co.uk

RBAC

Drift Isn’t a Detection Problem, It’s an Ownership Problem

September 1, 2026 by deniscooper@me.com
Terraform Drift Ownership

Terraform drift ownership is what actually closes out drift, not detection. Here’s how to assign it, respond to it, and stop it reopening.

Categories AZURE, GOVERNANCE, pipelines, RBAC, TERRAFORM Tags ARCHITECTURE, AZURE WAF, TERRAFORM, Well-Architected Framework Leave a comment

Platform Operating Model: Defining Who Owns What in Azure

July 28, 2026 by deniscooper@me.com
Azure Platform Operating Model

Ownership and access aren’t the same thing. Part 2 of the Azure Platform Operations series: a practical model for who owns what, and why it breaks.

Categories AZURE, ENTRA, GOVERNANCE, GUIDE, Landing Zone, RBAC, SECURITY Tags AZURE, GOVERNANCE, SECURITY Leave a comment

Entra vs Azure RBAC: Why Global Admin Doesn’t Mean What You Think

March 3, 2026 by deniscooper@me.com

Confused why Global Admin can’t access Azure resources? Learn the difference between Entra roles, Azure RBAC, and Defender permissions

Categories AZURE, ENTRA, GOVERNANCE, RBAC, SECURITY Tags AZURE, Entra ID Authentication, RBAC, SECURITY 1 Comment

Recent Posts

  • Terraform Module Lifecycle: From First Variable to a Release Teams Can Trust
  • Terraform Module Testing as Governance: The Part That Actually Enforces the Rules
  • Terraform Calling Conventions: How Your Modules Should Actually Talk to Each Other
  • Terraform Module Boundaries: What Actually Belongs in a Module
  • Terraform Repo Structure: Module Repos & Golden Paths Explained

Recent Comments

  1. Kevin on GitHub Actions OIDC Authentication to Azure
  2. Kevin on Token Theft in M365: Why MFA Fails and How to Fix It
  3. Andrea R. on Entra vs Azure RBAC: Why Global Admin Doesn’t Mean What You Think
  4. David Gómez on Entra Workload Identities Explained: Service Principals vs Managed vs Federated
  5. Andrea R. on Shift Cost Left: Adding Infracost to Your IaC Pipelines
© 2026 deniscooper.co.uk • Built with GeneratePress