Ensure fewer than ARG_0 users have global administrator assignment
Why This Matters
The Global Administrator role grants unrestricted access to all Microsoft Entra ID services and connected workloads. Having too many users with this role significantly increases your attack surface and the potential for human error, while having too few creates a single point of failure if an administrator becomes unavailable.
What Aether365 Checks
Aether365 verifies that the number of users assigned the Global Administrator role in your tenant falls within the recommended range of 2 to 4 users. This check appears in your Aether365 dashboard under the Entra ID security checks section.