Defender Decoded: Ensure Administrative Accounts Are Separate and Cloud-Only
Description Administrative accounts are special privileged accounts that can have varying levels of access to data, users, and settings. Regular user accounts should never be used for administrative tasks. In a hybrid environment, care should be taken to keep cloud administrative accounts separate from on-premises accounts.
Administrative accounts should not have unnecessary applications or productivity services assigned, such as email, Teams, or SharePoint. They should only have the access needed to perform administrative tasks.
