Forum Discussion
schiachris
Apr 28, 2026Copper Contributor
MFA required for Global Admin without Conditional Access or PIM enforcement
Hi, I'm analyzing a break-glass account scenario in Microsoft Entra ID and would like to validate a behavior I'm observing. The account: Has Global Administrator role (permanent assignment) Is ex...
Kidd_Ip
Apr 30, 2026MVP
I believe this is yes, Entra ID is enforcing mandatory MFA for ALL privileged accounts when accessing admin portals, regardless of Conditional Access or PIM configuration. This is part of Microsoft’s phased rollout of mandatory MFA enforcement across Azure and Microsoft 365 admin portals, and there is no supported way to fully exclude a break-glass account from this behavior.