Also contributed to
- CIS.M365.1.1.3(L1) Ensure that between two and four global admins are designated
- CISA.MS.AAD.7.1A minimum of two users and a maximum of eight users SHALL be provisioned with the Global Administrator role.
- CISA.MS.AAD.7.2Privileged users SHALL be provisioned with finer-grained roles instead of Global Administrator.
- CISA.MS.AAD.7.3Privileged users SHALL be provisioned cloud-only accounts separate from an on-premises directory or other federated identity providers.
- MT.1020All Conditional Access policies are configured to exclude directory synchronization accounts or do not scope them.