Forum Discussion
Office 365 MFA with Azure AD Sync Tool Service Account
We have recently started looking at the security state of our O365 tenant with the Secure Score tool (https://securescore.office.com). One of the suggestions to raise the score is to enable MFA for ...
The AAD Connect Global Admins account is only required when you run the wizard. AAD Connect creates itself a service account that does not have Global Admins rights, rather is a member of the special role, "Directory Synchronization Accounts".
If you're still using AADSync with a Global Admins service account, time to upgrade!
If you're still using AADSync with a Global Admins service account, time to upgrade!
Thanks for the clarification on that. We are using the AAD Connect tool thankfully. I've removed the GA role from the account question.
