Forum Discussion
shannonhamby
Sep 23, 2020Copper Contributor
Restrict Global Admin MFA Methods
Is it possible to change the mfa methods specifically for Global Admins that is different from the normal user base? What we are looking to do is the following: User base - Can register MFA by use o...
PeterRising
Sep 24, 2020MVP
VasilMichev is correct. Not possible at the moment.
If you have concerns over the security of your privileged admin accounts though, you could look at minimising the risk by setting up Privileged Identity Management and making some of these accounts eligible for these roles instead of having them permanently. This is an Azure AD Premium P2 feature, but well worth it if you can justify it.
The P2 licence will also give you Identity protection which enables risk based conditional access based on user and sign in risk. Not what you were asking for I appreciate, but it may offer an alternative means of protecting your environment and reducing the number of privileged accounts,
ChristianBergstrom
Sep 24, 2020Silver Contributor
Thanks to you as well! Good to know my reply to Shannon was correct. Cheers mate!