Privilege Management Modernization at Soudal
Evaluated, tested, and deployed a just-in-time privilege elevation solution to replace permanent local admin rights across Soudal's Microsoft Intune-managed endpoint fleet — improving security posture, audit compliance, and operational control.
Permanent admin rights across hundreds of endpoints
Soudal NV's Microsoft Intune-managed devices had accumulated permanent local administrator rights across Engineering, Service Desk, and power user groups — creating an expanding attack surface with no audit trail, no revocation process, and no compliance evidence under ISO 27001 and GDPR.
Objective
Replace permanent local admin rights with controlled, temporary, auditable just-in-time elevation workflows.
Approach
Hands-on lab testing of two candidate tools — Admin By Request and Microsoft EPM — across 24 structured tests.
Outcome
ABR recommended and deployed with phased rollout strategy, tailored access models for 4 user groups, and full audit coverage.
Three-phase approach
Phase 1: Analysis
- Deep-dive analysis of Soudal's hybrid identity architecture
- Hands-on lab testing: 6 ABR tests + 18 EPM tests
- Feature comparison matrix with weighted scoring
- Tool recommendation to leadership (March 20, 2026)
Phase 2: Pilot
- ABR deployed to pilot group (App department)
- Expanded to 30–50 power users and developers
- Permission revocation begun
- User feedback collected and monitored
Phase 3: Production
- App-specific elevation rules deployed across all endpoints
- Remaining legacy admin rights revoked systematically
- Training materials and documentation delivered
- Final realization report compiled and archived
Tech stack
Project documentation
Complete set of deliverables produced during the 13-week placement. Click Download on each card to access the file.
Realization Document
Full thesis — 72 pages covering analysis, testing, comparison, deployment strategy, and stakeholder communication.
Project Plan
13-week project plan with phased methodology, success criteria, risk register, and responsibilities.
ABR Testing Report
Complete lab testing documentation for all six Admin By Request tests with evidence.
ABR vs EPM Comparison
Feature comparison and evidence-based recommendation against requirements.
Use Case Documentation
Five use cases, four user group mappings, and access model specifications.
Project team
Muhammad Zubair
IT Infrastructure Intern
Thomas More · Soudal NV
Dries Wuyts
Work Placement Mentor
Soudal NV
Eduard Claessen
Work Placement Mentor
Soudal NV
Rob Verbiest
Work Placement Mentor
Soudal NV
Brent Pulmans
Academic Supervisor
Thomas More