Limit administrator rights needed by Synchronization account. Global admin should not be needed
Given that there are more RBAC roles in Azure AD than ever before. I aswell as many more with me would like to see a "School Data Sync Admin" instead of granting permanent GA to an account that is usually outsourced to a 3rd party.
11
votes
Viktor Hedberg
shared this idea