Entra ID — Privileged Identity Management · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 00:26

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Keep the number of permanent Global Administrators between 2 and 5, including dedicated break-glass accounts.

Enable Privileged Identity Management for every Entra admin role; require activation instead of permanent assignment.

Require multi-factor authentication on every role activation, including low-risk roles.

Require approval workflows for Global Administrator and Privileged Role Administrator activations.

Configure access reviews to run at least quarterly for every role with elevated privileges.

Limit role activation maximum duration to 8 hours or less for Global Administrator.

Send email notifications to a security distribution list when privileged roles are activated.

Maintain two break-glass accounts excluded from Conditional Access, with FIDO2 keys stored offline in tamper-evident bags.