Ensure that between two and four global admins are designated

Why This Matters

The Global Administrator role grants full, unrestricted access to all Microsoft 365 services, directory data, and administrative functions. Having too few designated global admins creates a single point of failure if that account becomes compromised or inaccessible, while having too many increases the attack surface and risk of lateral movement by attackers. Maintaining a balanced number between two and four ensures redundancy without excessive privileged accounts.

What Aether365 Checks

Aether365 verifies that your Microsoft 365 tenant has between two and four active Global Administrator accounts assigned. This check appears in your Aether365 dashboard under the Microsoft 365 security checks section and flags any deviation from the recommended range.