Do you have an Office 365 admin accout as well a normal user?

[nicholab]

Do you licence your admin and standard account for Office 365 so that you can separate your admin and standard user? Do you mind paying for an extra account if you used paid-for features?

[3s-gtech]

Oh my, yes. My admin account is not used for daily stuff.

[Norphy]

Admin accounts don't have to licensed. Having your daily driver as an admin of any sort is incredibly bad practice.

[jmak]

Admin accounts don't have to licensed. Having your daily driver as an admin of any sort is incredibly bad practice.

^^ This

 

Our rule is that any account used for admin of any system must not have any email account associated with it.

[Olliedawg]

Yea daily driver with no admin access (both on prem and 365)

 

As above admin accounts dont need licences

[WannabrewUK]

Absolutely

[nicholab]

How do you cope when you open a window as admin and then Office desires to sign in as your standard user?

 

I am also sure there are some portals that need you to have a licence.

Edited September 4, 2024 by nicholab

[Roberto]

I think I have at least 3 accounts. One for daily driver, one for cloud admin, one for on-prem admin.

 

How do you cope when you open a window as admin and then Office desires to sign in as your standard user?

 

I am also sure there are some portals that need you to have a licence.

 

I do admin work in a private browser session. Or a different browser.

 

Not sure how many portals need you to have a licence. Off the top of my head, I think Intune did at one point but there's ways around that now.

Edited September 4, 2024 by Roberto

[FN-GM]

How do you cope when you open a window as admin and then Office desires to sign in as your standard user?

 

I am also sure there are some portals that need you to have a licence.

 

You don’t use your standard workstation to login with your admin account. You would use a jump host. That jump host shouldn’t have office installed.

 

Security principles are to never mix your every day workstation and your admin activity. It’s the same reason you don’t manage Active Directory from your own endpoint.

[DalekSec]

I have an Admin and non admin account, Techs use PIM so they only have 1 account but have to activate their admin rights (azure only)

[Sibrows]

Recently started a new role.

 

Separate admin accounts were being used but email associated with those accounts was being missed.

 

Don’t forget to forward the email to your normal mailbox!

[jmak]

Recently started a new role.

 

Separate admin accounts were being used but email associated with those accounts was being missed.

 

Don’t forget to forward the email to your normal mailbox!

Why is email being sent to admin accounts? It sounds like a bad idea to me.