Sysadmin

5574 readers

2 users here now

A community dedicated to the profession of IT Systems Administration

founded 5 years ago

MODERATORS

[email protected]

How are you identifying least privileged access in 365? (lemmy.blahaj.zone)

submitted 1 year ago by [email protected] to c/[email protected]

6 comments fedilink hide all child comments

I’ve started at a medium-sized org (~1500 users) that has over a dozen global admins in 365, plus another 80 users with various 365 admin access. Does anyone have any tips for how to identify what access the users actually need?

I tried punching up a questionnaire with all of the available options, but my test group reported that it was too convoluted. I’m not sure how I can better identify their needs without interviewing them one-on-one, or just ripping away access and seeing who screams.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 1 year ago (1 children)

Is there any way to look at what access people are actually using?

[–] [email protected] 1 points 1 year ago

I haven't found anything like a full report on admin right usage for all users. I'd hate to go user-by-user in audit reporting - At that point I may as well just interview them.