ISPM 2 to 4 Global Admins
under review
M
Matthew Chapman
I ran into an interesting situation with one of my clients. for the 2 to 4 Global admins control, it's not detecting if a user has the Global Admin role assigned via a security group. This also might be worth building a detection for, because someone could assign themselves a Global admin role using a security group and not be detected.
S
Scott Riley
marked this post as
under review
Interesting! OK I'll flag this with one of the team who manages the security control for that setting. I don't think we've bumped into that scenario before. We've covered things like permanently active PIM roles so we capture those but this is a different edge case. Thanks for flagging!