{"id":75,"title":"Office 365 Kullan\u0131c\u0131 ve Eri\u015fim Y\u00f6netimi Azure Active Directory","content":"Modern kurumlar, Microsoft 365 (eski ad\u0131yla Office 365) gibi bulut tabanl\u0131 platformlarda kullan\u0131c\u0131 rolleri ve izinleri y\u00f6netimi <\/strong>yaparken hem g\u00fcvenli\u011fi <\/strong>hem de esnekli\u011fi <\/strong>sa\u011flayacak merkezi bir \u00e7\u00f6z\u00fcm gerektirir. Bu ba\u011flamda Azure Active Directory (Azure AD) <\/strong>, kullan\u0131c\u0131 kimliklerini merkezi olarak y\u00f6netmek, rol tabanl\u0131 eri\u015fim kontrol\u00fc (RBAC) sa\u011flamak ve g\u00fcvenlik politikalar\u0131n\u0131 uygulamak i\u00e7in en g\u00fc\u00e7l\u00fc ara\u00e7t\u0131r. Bu yaz\u0131da, Azure AD'nin neden Office 365 ortamlar\u0131nda kullan\u0131c\u0131 ve eri\u015fim y\u00f6netimi i\u00e7in en uygun \u00e7\u00f6z\u00fcm;

Azure AD Nedir?<\/strong><\/h3> Azure AD, Microsoft\u2019un sundu\u011fu bulut tabanl\u0131 kimlik ve eri\u015fim y\u00f6netimi (IAM) <\/strong>hizmetidir. Temel i\u015flevleri \u015funlard\u0131r:
  • Kullan\u0131c\u0131 ve grup y\u00f6netimi: <\/strong>Kullan\u0131c\u0131 hesaplar\u0131, gruplar ve rolleri olu\u015fturup y\u00f6netme.<\/li>
  • Rol Tabanl\u0131 Eri\u015fim Kontrol\u00fc (RBAC): <\/strong>Kullan\u0131c\u0131lara yaln\u0131zca ihtiya\u00e7 duyduklar\u0131 izinleri verme.<\/li>
  • Tek Oturum A\u00e7ma (SSO): <\/strong>Kullan\u0131c\u0131lar\u0131n birden fazla uygulamada tek bir kimlikle oturum a\u00e7mas\u0131n\u0131 sa\u011flama.<\/li>
  • Ko\u015fullu Eri\u015fim (Conditional Access): <\/strong>G\u00fcvenlik politikalar\u0131na g\u00f6re eri\u015fimi denetleme.<\/li>
  • G\u00fcvenlik ve Uyumluluk: <\/strong>Riskli oturumlar\u0131 tespit etme ve koruma sa\u011flama.<\/li> <\/ul>
    <\/div> Azure AD, Microsoft 365 (Office 365), Azure ve di\u011fer Microsoft hizmetleriyle derin entegrasyona sahiptir.

    Neden Azure AD Tercih Edilmelidir?<\/strong><\/h3>

    Merkezi Kimlik Y\u00f6netimi<\/strong><\/h4>
    • Azure AD, kullan\u0131c\u0131lar\u0131, gruplar\u0131 ve rolleri tek bir konsoldan y\u00f6netmenizi sa\u011flar.<\/li>
    • \u015eirket i\u00e7i Active Directory ile e\u015fitleme: <\/strong>Azure AD Connect arac\u0131yla \u015firket i\u00e7i AD\u2019yi Azure AD ile senkronize ederek \u00e7ift y\u00f6netim <\/strong>ihtiyac\u0131n\u0131 ortadan kald\u0131r\u0131r.<\/li> <\/ul>
      <\/div>

      Rol Tabanl\u0131 Eri\u015fim Kontrol\u00fc (RBAC)<\/strong><\/h4>
      • Azure AD, kullan\u0131c\u0131lar\u0131 belirli rollerle ili\u015fkilendirerek en az ayr\u0131cal\u0131k ilkesi <\/strong>(least privilege)\u2019ne uygun eri\u015fim sa\u011flar.
        • \u00d6rnek Roller:<\/strong>
          • Global Admin: <\/strong>T\u00fcm kaynaklara tam eri\u015fim.<\/li>
          • Exchange Online Admin: <\/strong>E-posta yap\u0131land\u0131rmalar\u0131 i\u00e7in s\u0131n\u0131rl\u0131 eri\u015fim.<\/li>
          • Uygulama Y\u00f6neticisi: <\/strong>Yaln\u0131zca belirli uygulamalar\u0131 y\u00f6netme.<\/li> <\/ul> <\/li> <\/ul>
            <\/div><\/li>
          • Bu yap\u0131, izinlerin gruplara veya tekil kullan\u0131c\u0131lara <\/strong>kolayca atanmas\u0131n\u0131 sa\u011flar.<\/li> <\/ul>

            Ko\u015fullu Eri\u015fim Politikalar\u0131<\/strong><\/h4>
            • Azure AD, kullan\u0131c\u0131lar\u0131n eri\u015fimini ko\u015fullara <\/strong>g\u00f6re k\u0131s\u0131tlamak i\u00e7in g\u00fc\u00e7l\u00fc bir ara\u00e7 sunar.
              • \u00d6rnek Politikalar:<\/strong>
                • Belirli bir co\u011frafi konumdan giri\u015f yapan kullan\u0131c\u0131lar\u0131 engelle.<\/li>
                • Uyumsuz cihazlardan eri\u015fimi k\u0131s\u0131tla.<\/li>
                • Riskli oturum a\u00e7ma giri\u015fimlerinde Multi-Factor Authentication (MFA) zorunlulu\u011fu.<\/li> <\/ul> <\/li> <\/ul>
                  <\/div><\/li>
                • Bu politikalar, Microsoft Defender for Cloud Apps ve Azure AD Identity Protection ile entegre \u00e7al\u0131\u015f\u0131r.<\/li> <\/ul>

                  Tek Oturum A\u00e7ma (Single Sign-On - SSO)<\/strong><\/h4>
                  • Azure AD, kullan\u0131c\u0131lar\u0131n tek bir kimlikle <\/strong>Office 365, Azure, Salesforce, Dropbox gibi binlerce uygulamaya eri\u015fmesine olanak tan\u0131r.<\/li>
                  • Faydalar\u0131:<\/strong>
                    • Kullan\u0131c\u0131 deneyimini iyile\u015ftirir.<\/li>
                    • Parola y\u00f6netimi zorlu\u011funu azalt\u0131r.<\/li>
                    • G\u00fcvenli\u011fi art\u0131r\u0131r (\u00f6rne\u011fin, MFA entegrasyonu).<\/li> <\/ul> <\/li> <\/ul>

                      Otomatik Kullan\u0131c\u0131 Sa\u011flama ve Y\u00f6netimi<\/strong><\/h4>
                      • Azure AD, kullan\u0131c\u0131lar\u0131n otomatik olarak olu\u015fturulmas\u0131n\u0131 ve kald\u0131r\u0131lmas\u0131n\u0131 <\/strong>sa\u011flar.
                        • \u00d6rnek:<\/strong>
                          • Bir kullan\u0131c\u0131 \u015firketten ayr\u0131ld\u0131\u011f\u0131nda, Azure AD ile t\u00fcm Office 365 hizmetlerinden eri\u015fimi otomatik olarak kald\u0131r\u0131l\u0131r.<\/li> <\/ul> <\/li> <\/ul>
                            <\/div><\/li>
                          • Bu s\u00fcre\u00e7, PowerShell <\/strong>veya Microsoft Graph API <\/strong>ile \u00f6zelle\u015ftirilebilir.<\/li> <\/ul>

                            G\u00fcvenlik ve Uyumluluk<\/strong><\/h4>
                            • Azure AD, Microsoft\u2019un sundu\u011fu ileri d\u00fczey g\u00fcvenlik \u00f6zellikleri <\/strong>ile kullan\u0131c\u0131lar\u0131 ve kaynaklar\u0131 korur:
                              • Identity Protection: <\/strong>Riskli oturum a\u00e7ma giri\u015fimlerini tespit eder ve engeller.<\/li>
                              • Privileged Identity Management (PIM): <\/strong>Kritik rollerin (\u00f6rne\u011fin, Global Admin) yaln\u0131zca ihtiya\u00e7 duyuldu\u011funda kullan\u0131lmas\u0131na olanak tan\u0131r.<\/li>
                              • Denetim ve Loglama: <\/strong>Kullan\u0131c\u0131 etkinliklerini Azure Monitor <\/strong>veya Microsoft Purview Compliance Center <\/strong>ile izleyebilirsiniz.

                                <\/h3>

                                Azure AD Alternatiflerinin S\u0131n\u0131rl\u0131l\u0131klar\u0131<\/strong><\/h3>
                                Alternatif<\/strong><\/div><\/th>
                                S\u0131n\u0131rl\u0131l\u0131klar<\/strong><\/div><\/th> <\/tr> <\/thead>
                                Manuel \u0130zni Y\u00f6netme<\/strong><\/div><\/td>
                                Zaman al\u0131c\u0131d\u0131r, hata riski y\u00fcksektir, \u00f6l\u00e7eklenebilir de\u011fildir.<\/div><\/td> <\/tr>
                                Yaln\u0131zca Office 365 Gruplar\u0131<\/strong><\/div><\/td>
                                Rol bazl\u0131 de\u011fil, kaynak baz\u0131nda izin verir. Karma\u015f\u0131k senaryolarda yetersiz kal\u0131r.<\/div><\/td> <\/tr>
                                Office 365 Admin Merkezi<\/strong><\/div><\/td>
                                Temel d\u00fczey izin y\u00f6netimi sa\u011flar, ancak geli\u015fmi\u015f g\u00fcvenlik ve otomasyon yoktur.<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div> <\/div>  <\/li> <\/ul> <\/li> <\/ul>

                                Azure AD ile Kullan\u0131c\u0131 ve Rol Y\u00f6netimi Ad\u0131mlar\u0131<\/strong><\/h3>

                                Rol Atamas\u0131 Yapma<\/strong><\/h4>
                                1. Azure Portal\u2019a giri\u015f yap\u0131n.<\/li>
                                2. \"Kullan\u0131c\u0131lar\" > \"T\u00fcm kullan\u0131c\u0131lar\" <\/strong>b\u00f6l\u00fcm\u00fcne gidin.<\/li>
                                3. Hedef kullan\u0131c\u0131ya \"Roller\" <\/strong>atay\u0131n (\u00f6rne\u011fin, \"Exchange Online Admin\").<\/li>
                                4. Gerekti\u011finde \u00f6zel roller olu\u015fturabilirsiniz.<\/li> <\/ol>
                                  <\/div>

                                  Ko\u015fullu Eri\u015fim Politikas\u0131 Olu\u015fturma<\/strong><\/h4>
                                  1. Azure Portal\u2019dan \"Azure AD\" > \"Ko\u015fullu Eri\u015fim\" <\/strong>b\u00f6l\u00fcm\u00fcne gidin.<\/li>
                                  2. Yeni bir politika olu\u015fturun:
                                    • Kapsam: <\/strong>Belirli kullan\u0131c\u0131lar veya gruplar.<\/li>
                                    • Ko\u015fullar: <\/strong>Konum, cihaz t\u00fcr\u00fc, risk seviyesi.<\/li>
                                    • Eylemler: <\/strong>MFA zorunlulu\u011fu, eri\u015fim reddi veya oturumu sorgulama.<\/li> <\/ul> <\/li> <\/ol>
                                      <\/div>

                                      Otomatik Kullan\u0131c\u0131 Sa\u011flama<\/strong><\/h4>
                                      1. Azure Portal\u2019dan \"Enterprise Applications\" <\/strong>b\u00f6l\u00fcm\u00fcne gidin.<\/li>
                                      2. Hedef uygulama (\u00f6rne\u011fin, Office 365) i\u00e7in \"Automatic User Provisioning\" <\/strong>se\u00e7ene\u011fini etkinle\u015ftirin.<\/li>
                                      3. E\u015fitleme kurallar\u0131n\u0131 yap\u0131land\u0131r\u0131n.<\/li> <\/ol>

                                        Troubleshooting \/ Sorun giderme:<\/strong><\/h3>
                                        <\/div> <\/div> <\/div>
                                        Soru<\/strong><\/div><\/th>
                                        \u00c7\u00f6z\u00fcm<\/strong><\/div><\/th> <\/tr> <\/thead>
                                        Kullan\u0131c\u0131 Gereksiz Rol Al\u0131yor Mu?<\/strong><\/div><\/td>
                                        Azure AD'deAccess Reviews<\/strong>\u00f6zelli\u011fini kullanarak rolleri d\u00fczenli olarak g\u00f6zden ge\u00e7irin.<\/div><\/td> <\/tr>
                                        Ko\u015fullu Eri\u015fim Politikas\u0131 Etkisiz Kal\u0131yor Mu?<\/strong><\/div><\/td>
                                        Politikan\u0131n kullan\u0131c\u0131lar\u0131, ko\u015fullar\u0131 ve eylemlerini kontrol edin.<\/div><\/td> <\/tr>
                                        Otomatik Kullan\u0131c\u0131 Sa\u011flama Ba\u015far\u0131s\u0131z Oluyor Mu?<\/strong><\/div><\/td>
                                        Azure AD Connect\u2019in durumunu ve e\u015fitleme kurallar\u0131n\u0131 g\u00f6zden ge\u00e7irin.<\/div><\/td> <\/tr>
                                        SSO \u00c7al\u0131\u015fm\u0131yor Mu?<\/strong><\/div><\/td>
                                        Uygulama yap\u0131land\u0131rmas\u0131, kullan\u0131c\u0131 atamalar\u0131 ve cihaz uyumlulu\u011funu kontrol edin.<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div>

                                        Azure Active Directory, Microsoft 365 (Office 365) ortamlar\u0131nda kullan\u0131c\u0131 ve eri\u015fim y\u00f6netimi i\u00e7in merkezi, g\u00fcvenli ve \u00f6l\u00e7eklenebilir <\/strong>bir \u00e7\u00f6z\u00fcm sunar. Rol tabanl\u0131 eri\u015fim kontrol\u00fc, ko\u015fullu eri\u015fim politikalar\u0131, tek oturum a\u00e7ma (SSO) ve otomatik kullan\u0131c\u0131 sa\u011flama gibi \u00f6zellikler, g\u00fcvenlik risklerini azalt\u0131rken y\u00f6netim maliyetlerini d\u00fc\u015f\u00fcr\u00fcr. Manuel izin y\u00f6netimi veya s\u0131n\u0131rl\u0131 yetkilendirme sunan alternatif y\u00f6ntemler, karma\u015f\u0131k ve g\u00fcvensiz yap\u0131lar yarat\u0131r. Azure AD ile kurumlar, kullan\u0131c\u0131 rollerini etkili bir \u015fekilde y\u00f6netebilir ve g\u00fcvenlik standartlar\u0131n\u0131 koruyabilir. Azure AD ile Microsoft Defender for Office 365 <\/strong>gibi g\u00fcvenlik \u00e7\u00f6z\u00fcmlerini entegre ederek e-posta g\u00fcvenli\u011fini de art\u0131rabilirsiniz.<\/p> <\/div>","excerpt":"Modern kurumlar, Microsoft 365 (eski ad\u0131yla Office 365) gibi bulut tabanl\u0131 platformlarda kullan\u0131c\u0131 rolleri ve izinleri y\u00f6netimi yaparken hem...","created_at":"2025-05-01 14:30:56","updated_at":"2026-09-07 01:00:33","category_id":8,"view_count":775,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-05-01 14:30:56","featured_image":"resimyok.jpg","slug":"office-365-kullanici-ve-erisim-yonetimi-azure-active-directory","category_name":"Active Directory \/Azure","category_slug":"active-directory-azure"}