A cloud directory is a centralized identity service that stores or brokers user accounts, groups, and access policy across cloud and connected on-premises systems. It often acts as the control plane for login, single sign-on, provisioning, and authorization. Unlike a simple user list, it may sync identities from multiple sources and push permissions to applications through APIs and standards such as SCIM.
Cloud directories matter because they sit on the path to nearly every business application. If an attacker compromises the directory, they may gain broad access, create backdoor accounts, change group membership, or abuse weak deprovisioning to keep old accounts alive. Defenders use least privilege, MFA, audit logging, and tightly controlled admin roles to reduce that risk. Clean provisioning and rapid access removal are especially important during workforce changes and incident response.