The AirGap Blueprints · A Cloud Security Strategy Guide
To followOne Name, Every Answer by Convention
A Practical Guide to Naming Conventions for Groups, Accounts and Policies across Microsoft Entra ID, Intune and the Defender Suite
Notify me when it's out
Why this book
A good name answers the question before anyone has to ask it: what this is, who owns it, what it does and how risky it is. This guide gives you a naming convention for groups, accounts and policies that works across Entra ID, Intune and Defender — and the rules to keep it from drifting.
Who it's for
- Teams inheriting a tenant full of "Test-Policy-Final-2" objects
- Architects standardising Entra ID, Intune and Defender together
- Auditors and service desks who need to read the tenant at a glance
What's inside
- What a name must tell you, and in what order
- Conventions for groups, admin and service accounts
- Conventions for Conditional Access, Intune and Defender policies
- Encoding environment, scope and risk tier without long names
- Enforcing the convention, including group naming policy
- Cleaning up an existing tenant without breaking assignments
Built like every AirGap Blueprint
- Rationale
- Planning
- Implementation
- Adoption
Each guide takes one control from why it matters to running it in production, with the decisions, settings and review cadence written down — not just the clicks.


