Salamander + Azure: What permissions?

[howartp]

Hi

 

We're starting to move towards O365/Azure/Entra and Salamander want Global Administrator privileges which is clearly frowned upon the same as giving users/services Domain Admin rights on local network.

 

What level have folk given Salamander before I re-invent the wheel?

[Mr.Ben]

Hi

 

We're starting to move towards O365/Azure/Entra and Salamander want Global Administrator privileges which is clearly frowned upon the same as giving users/services Domain Admin rights on local network.

 

What level have folk given Salamander before I re-invent the wheel?

It's not a Salamander issue FAIK. The SDS service requires a GA. We limit login access to the salamander account using Conditional access to our server.

[DarkMaster]

what do you have set in your CA policy?

[Batchelorm]

I am pretty sure they only need Global Admin access for the initial configuration then you are good to remove it again.