Activation of the Global Administrator role SHALL require approval.

Why This Matters

Without requiring approval for Global Administrator role activation, any user with eligible privileges can elevate to this highly privileged role without oversight. This increases the risk of unauthorized access to critical directory settings and data. IT administrators must enforce approval workflows to maintain control over sensitive administrative actions.

What Aether365 Checks

Aether365 verifies that Privileged Identity Management (PIM) in Entra ID requires approval for Global Administrator role activation. This check appears in the Aether365 dashboard under Entra ID security checks.