Forum Discussion

jonwbstr24's avatar
jonwbstr24
Brass Contributor
Feb 20, 2025

Securing Global Administrator accounts

Hello all,

According to this article:

Use admin accounts only for Microsoft 365 administration. Admins should have a separate user account for their regular use of Microsoft 365 Apps, and only use their administrative account when necessary to manage accounts and devices, and while working on other admin functions. It's also a good idea to remove the Microsoft 365 license from your admin accounts so you don't have to pay for extra licenses.

I should have a separate unlicensed admin account.

How do I follow the above recommendation and continue to receive emails from the partner center?

We have also been encouraged to use Privileged Identity Management, and use one account but only activate the admin role when needed. Does Microsoft recommend using PIM, or do they recommend using separate admin accounts?

When using PIM, I only receive email sent to global administrators, when the PIM role is active. I am having trouble understanding how to follow this guidance when the admin portals do not appear to support emailing the "regular user account" of an administrator.

When I asked Partner Center frontline support for clarification on this guidance I was asked to post my question here.

Thanks!

Resources