Skip to main content

Limited number of Global Admins are assigned

Description

Global administrator is the highest privileged role. If a Global Administrator is compromised, the attacker gains access to all of their permissions, which put your whole system at risk.

Note: By default, the check excludes emergency access (Break Glass) accounts which has been identified by Maester.

How to fix

Review the users in the list and remove them from privileged roles that they don't need. Notes in the Maester test results provide direct link to the alert page with details to identify and how to address the recommendations.

Learn more