thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

Enterprise Access Model

Microsoft model separating access into control, management, data/workload, and user/app access planes, replacing the legacy tier model.

Definition

The enterprise access model extends the older Active Directory tier 0/1/2 administration model to hybrid and cloud environments. It protects the control plane (identity systems such as domain controllers and Entra ID) most strictly and prevents credentials from higher-privilege planes being exposed on lower-trust systems. Privileged access workstations and PIM support it.

Example

Domain admins sign in only from privileged access workstations and never to ordinary member servers.

Exam tip

The core idea is preventing privileged credential exposure on less-trusted systems.

Related terms