Security Practices and Solutions
View All Tags
An encrypted connection keeps your password and your data private on the way to MySQL. MySQL 9.7 sets up encryption by itself and uses it whenever it can, but the mysql client in Docker can show SSL: Not in use, and that is fine. This guide shows how to check any connection, why a Unix socket is different, and how to insist on encryption.
A password typed into compose.yaml ends up in Git, and then in every copy of the repository. Docker Compose can read passwords from a separate .env file instead, and with one small piece of syntax it refuses to start when they're missing. This guide sets that up for a MySQL container, with the real output of every check.
The passwords people make up are easy to guess. The ones a computer picks at random aren't. One command in your terminal generates a long, cryptographically random password made only of letters and digits, which is safe to paste into connection strings, .env files and YAML. This guide shows it for macOS, Linux and Windows.
When someone can't open an app in an environment, the Power Platform admin center can check the usual causes for you. Run diagnostics looks at one person's sign-in, license, group membership and roles, and says what to fix. This guide runs it and reads the results, including one that looks like a problem and isn't.
Before someone can open an app in an environment with Dataverse, they need a user record in that environment. Many people get one automatically, but not everyone and not in every environment. This guide adds one person by hand in the Power Platform admin center, so their first visit just works.
In an environment with Dataverse, people need a security role before they can use its data. Instead of giving the role to each person, give it to a Microsoft Entra group once, with a group team: everyone in the group gets the role, and new members get it automatically. This guide creates one and gives it Basic User.
I created a Microsoft Entra group team, ticked Basic User, selected Save and got a success message. When I opened the team's roles again, nothing was ticked. Selecting Save in the roles pane only opens a confirmation, and the role is assigned when you select Save a second time, in that confirmation.
Security groups are how access follows people. Give a group access to an app or a site once, and everyone you add to the group gets it. This guide adds a new joiner to an existing group in the Microsoft Entra admin center, step by step.
When someone leaves, the first thing to do with their account is stop it being used. Block sign-in does exactly that: nobody can sign in as the person, and their mailbox, files and data stay where they are. This guide blocks a leaver in the Microsoft 365 admin center, shows what he sees when he tries to sign in, and does the same with PowerShell.
When someone leaves, Microsoft's offboarding steps sign them out of everything and block their sign-in. I blocked first, and the Microsoft 365 admin center then stopped offering Sign out of all sessions. Microsoft Entra's Revoke sessions still worked.
