May 14 2020
11:25 AM
- last edited on
Jan 14 2022
04:31 PM
by
TechCommunityAP
May 14 2020
11:25 AM
- last edited on
Jan 14 2022
04:31 PM
by
TechCommunityAP
Evening All,
I'm trying to confirm how many PIM eligible global administrators can you have in a tenant? Is it still 4 or is that recommendation only for accounts with a perm GA role? Under what conditions could that be relaxed?
The current guidance seems a little vague and getting various opinions on the topic.
Thanks in advance.
B
Josh
May 14 2020 12:31 PM
The recommendation from Microsoft is to have no more than 4 dedicated GA accounts. However, as far as I know, there are no such guidelines for PIM eligible GA's. This would make sense as they only have the role on a just in time basis, and are therefore less vulnerable.
This article may be of help - https://docs.microsoft.com/en-us/office365/enterprise/protect-your-global-administrator-accounts
May 15 2020 03:43 AM
May 15 2020 03:58 AM
Agreed. I would say that if you are going to have a significant number of PIM eligible GA's, then requiring an approval process is really going to be essential.