Ensure That 'Restrict access to Microsoft Entra admin center' is Set to 'Yes'

Why This Matters

The Microsoft Entra admin center contains highly sensitive configuration data and permission settings. If non-administrators can access this portal, they may view or expose security-critical information that could aid in privilege escalation or data breaches. Restricting access to only authorized administrators reduces the risk of unintentional exposure and enforces least-privilege principles.

What Aether365 Checks

Aether365 verifies that the Restrict access to Microsoft Entra admin center setting is set to Yes for your tenant. This check appears in the Aether365 dashboard under the Entra ID security checks section.

How to Fix

To restrict access to the Microsoft Entra admin center:

Microsoft references

• Users default permissions
• Active directory assign admin roles azure portal
• Security controls v2 governance strategy
• Security controls v2 governance strategy
• Security controls v2 privileged access
• Security controls v2 privileged access