No more typing reviews! Try our Samantha, our new voice AI agent.

Azure Bastion vs Microsoft Entra Permissions Management [EOL] comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Azure Bastion
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
12
Ranking in other categories
Network Monitoring Software (52nd), Remote Monitoring and Management (RMM) (12th), Microsoft Security Suite (25th)
Microsoft Entra Permissions...
Average Rating
7.0
Reviews Sentiment
7.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Featured Reviews

AB
Lead Software Engineer at Glastechnische Industrie Peter LISEC GmbH
Have improved security with role segregation and accessibility
The most valuable feature of Azure Bastion is its security, which I find to be the best part. We use Azure AD integration to specify who has access and what they can do. We can segregate roles, allowing some to execute commands while others cannot. Additionally, we are using it internally to connect to our secured AKS Cluster.
Sameer Bhat - PeerSpot reviewer
Vice President at Goldman Sachs
Provides resource-based access and security, but time-bound access can be a problem
Entra ID is the core of the identity management that we have. This is the key product that we are using. I am currently also looking into Entra Private Access because we are planning to deploy about 50,000 desktops into Azure and use Azure Virtual Desktop. We would like to give access to the users from the desktop to on-premises applications. I learned that Entra Private Access is a good solution. That is not yet GA, but that is what we are looking for. Entra provides a single pane of glass for managing user access, but because our company also integrates with Nebula API, only administrators use Entra's pane. A normal person who wants to get onboarded can do self-service using Nebula. The features for whitelisting and other things are definitely there. That is what we use specifically. Application IDs, enterprise applications, and all those things are already there, so we have more efficiency. There is also security because we usually do not allow user identities to get direct access to Azure resources. Usually, we use the service principles from Entra ID, so this way, it increases security. Entra has helped to save time for our IT administrators. We tend to automate a lot of things. We can do automation using Graph APIs and save time. It is hard to quantify the time savings, but there has been a medium amount of time savings. Entra has helped to save our organization money. We care about security and risk more than money, but it also saves money. We are premium customers, and because we have a commit-to-consume contract with Microsoft of multi-million dollars, the money does not come into it because we have to consume those resources.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Azure Bastion is preferable because you just switch it on and off you go."
"As an Azure consultant, for me, it is the best way to give the administrator access as you can manage the permission - including who can access Bastion."
"Azure Bastion makes it easy to provide quick virtual machine access to our customers."
"The solution acts as a dedicated server and we have implemented multiple software, users can easily access everything from there, and it's a cost-effective solution as we don't want to purchase any servers because everything is on the cloud, which is the main advantage for the company."
"The ability to operate the product with scripting is excellent."
"The connection to virtual machines is very useful."
"The solution's most valuable feature is that it is easy to use...It is modernized, so I can create complex infrastructures."
"It provides all the security to us. Without getting on the internet, we can access our servers. We can access our desktop through our web browser. We don't need to run the mstsc command and login to the VM. All those things are not required."
"The solution integrates well with our infrastructure and other systems without any issues."
"Multifactor authentication is valuable."
 

Cons

"Currently, Azure Bastion does not allow for direct data transfer between desktops. A storage solution must be created to transfer data, and this requires additional permissions like ACL or NFS."
"You are charged for retrieving your own data."
"The protocol speed could be faster."
"Speaking of AI, having Microsoft Copilot in Azure Bastion would be good."
"There is room for improvement with AI features. I would like to see integrated AI features with Azure Bastion, especially for connectivity issues."
"While general support is valuable, having a detailed breakdown of the specific issues would contribute to a more streamlined and efficient resolution process."
"The solution breaks down sometimes."
"We are not able to copy and paste files directly into the server over the patch host. We have to transfer files over to Azure Storage."
"The solution's pricing and support services need improvement."
"We use a third-party API called Nebula API to integrate the account for authorization. The time-bound access area in Entra can be a problem. It can be improved in terms of the granularity of the permissions."
 

Pricing and Cost Advice

"It does not save money for us."
"The pricing is a lower decision point than high-quality security for our organization. Better security comes at a cost, but it's worth it, and that's what we tell our customers."
"Azure Bastion's pricing is good."
"The tool is cheaply priced. I would say that the product is free to use."
"We are a Fortune 500 company, so we always negotiate with Microsoft."
"The product cost is in the mid to high range."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
913,924 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
11%
Financial Services Firm
10%
Computer Software Company
10%
Outsourcing Company
8%
Financial Services Firm
18%
Computer Software Company
18%
Outsourcing Company
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise2
Large Enterprise6
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Azure Bastion?
Microsoft's pricing is on the higher side and could be more competitive. Startups and small organizations often prefer AWS ( /products/amazon-aws-reviews ) or GCP due to their lower costs, while la...
What needs improvement with Azure Bastion?
Azure Bastion could be improved with more granular session monitoring, rich audit capabilities, and deeper integration with security operation workflows. We would also appreciate enhanced reporting...
What is your primary use case for Azure Bastion?
Azure Bastion serves as our primary solution for providing secure administrative access to Azure VPNs and VMs without exposing RDP or SSH ports to the internet. From a cybersecurity perspective, it...
Ask a question
Earn 20 points
 

Also Known As

No data available
CloudKnox Permissions Management
 

Overview

Find out what your peers are saying about Microsoft and others in Microsoft Security Suite. Updated: August 2026.
913,924 professionals have used our research since 2012.