Practice Hub / Tools / IAM Policy and Privilege Simulator
Who can change the protected accounts
Test Northgate Engineering's draft delegation for its directors and HR staff, then turn an ordinary administrative unit into a boundary the tenant-wide help desk cannot cross.
Included with any paid plan
Open this scenario with any paid plan
Predict how AWS IAM, Azure RBAC or Microsoft Entra roles will decide a request, then fix the policies until the required access is allowed, the rest is denied and every escalation path is broken.
Your work saves to your account as you go, and downloads as files you keep.
From the course
Every course opens with a free module you can read in full, no account needed.