Microsoft's replacement for the old tier model, dividing privileged access into control, management and data/workload planes.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Enterprise access model in context, with comparison tables and the common traps.
Terms in this definition
- Archive
Offline access tier for blobs, cheapest to store yet dearest to access. Reading a blob means rehydrating it first, which can take as long as 15 hours.
- CONTROL
Granting this on a securable gives all other permissions on it too, making it the most powerful SQL permission. At database scope that includes UNMASK and ALTER ANY MASK. Warehouse access through the Admin, Member or Contributor workspace roles carries it.
Related terms
- AD DS tier model
Older administration model keeping credentials within their tier: Tier 0 for identity systems like DCs, Tier 1 for servers, Tier 2 for workstations. Superseded by the enterprise access model.
- ESAE
An older design in which admin accounts lived apart in a hardened forest of their own. Microsoft has since stopped recommending it for most organisations, preferring its privileged access strategy and enterprise access model.