Having Global Admin but need to activate it through PIM and give justification everytime
2026-11-01 09:30:24
104
SamuZ :
That is power you only want to wield if you never had it before.
2026-10-31 19:21:27
290
$Blesstok :
Just trying to get to Powe Bi 😆
2026-11-02 07:16:12
0
TheITBuckeyeGuy :
Director never heard of RBAC but definitely gonna be asking copilot to summarize it in a few days.
2026-11-01 00:03:25
32
Toto :
imagine GDAP admin for ~100 tenant on first day
2026-11-02 06:29:37
0
dertötlichemoritz :
And 2 days later, they roll out PIM
2026-10-31 17:32:24
108
DontaeThompson :
Got all of this first day at my MSP
2026-10-31 21:11:48
6
crusadeswest :
We don’t do global admin anymore. Get up to date on cybersecurity issues with this and you’ll understand why.
2026-11-01 03:44:37
2
Reverend Sudo Esquire :
***Creates conditional access policies to lock everyone out including all GA’s ****lol
2026-11-01 10:32:34
5
Fouad :
Use CIPP guys 😅
2026-11-01 15:04:08
0
demsea16 :
Idk, I got it right away as soon as a started, it’s nothing special, I just always make sure I understand what I am doing and potential consequences before doing something 🤷♂️
2026-10-31 20:23:49
14
Apple User826377581 :
recompute base encryption hash key.
2026-11-01 11:55:22
3
My Name Jeff :
take mine away, im tired of being the one that has to be responsible for everything.
2026-10-31 23:52:28
8
Layered sounds :
me when I arrived day one the only intern with that access
2026-11-01 10:01:59
2
Mir :
still waiting
2026-11-01 10:33:35
0
on2muchcoffee :
The sysadmin who granted it:
I won't be there no more
So get out of my way
Let me by
I got better things to do with my time
I don't care anymore
2026-10-31 17:33:51
12
Marky Mark :
Then they put it behind PIM with a collegue needing to accept it. But those 2 hrs of freedom[Tears of joy]
2026-11-01 20:33:18
1
Kiwiengineer__ :
No one’s getting GA. PIM role assigned least privileged roles only.
2026-11-01 05:24:06
0
Richo :
Set up approval flows in Intune to stop the fleet being wiped out.
2026-11-01 09:38:41
2
Tyler :
These comments are scary. CAP shouldn’t be able to lock you out because you should have breakglass accounts. You shouldn’t have global admin, you should be utilizing JIT to get specific permissions that you need.
2026-11-01 19:11:23
1
JP03WWW :
Why are we giving global admin in the world of PIM and JIT 😭 I don't remember authorising a single GA activation in 2 years because it's basically not needed in 99% of cases that I've been presented
2026-11-01 23:29:36
1
Brandon :
me just yesterday after 5 MONTHS 😭
2026-10-31 19:54:36
3
Geeno :
🔥🔥🔥hehehehehehehe that's normal what's the fuss
2026-11-01 13:18:31
1
To see more videos from user @vabeachtech, please go to the Tikwm
homepage.