Skillplan M365 Checklist
2026-07-20 19:26
M365
Microsoft 365 Security Checklist
de
en
fr
it
System Online
← Back to sections
Mitigation Controls · Section 3 of 17
Entra ID — Privileged Identity Management
Assessment Progress
0
/ 136 items
0%
Fulfillment so far
0
/ 0 controls
0%
Explain this control
Keep the number of permanent Global Administrators between 2 and 5, including dedicated break-glass accounts.
Not Fulfilled
Fulfilled
Accepted
Enable Privileged Identity Management for every Entra admin role; require activation instead of permanent assignment.
Not Fulfilled
Fulfilled
Accepted
Require multi-factor authentication on every role activation, including low-risk roles.
Not Fulfilled
Fulfilled
Accepted
Require approval workflows for Global Administrator and Privileged Role Administrator activations.
Not Fulfilled
Fulfilled
Accepted
Configure access reviews to run at least quarterly for every role with elevated privileges.
Not Fulfilled
Fulfilled
Accepted
Limit role activation maximum duration to 8 hours or less for Global Administrator.
Not Fulfilled
Fulfilled
Accepted
Send email notifications to a security distribution list when privileged roles are activated.
Not Fulfilled
Fulfilled
Accepted
Maintain two break-glass accounts excluded from Conditional Access, with FIDO2 keys stored offline in tamper-evident bags.
Not Fulfilled
Fulfilled
Accepted
Save and Continue →
