Unremovable Global administrator

marbuna sells 36 Reputation points
2020-07-21T14:27:05.853+00:00

Hi!

I have an Azure AD where i managing my company.
I want to give my CEO an Global Administrator role, because I want he will always can control all the company.
Also, I have an IT man that also have an Global administrator role (needed, because he manged the MFA settings).

Is there any option to prevent the IT-man from remove the CEO from being "Global Administrator" but keep him(IT man) possible to mange the company and the MFA settings?

thank you!

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
709 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,353 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,531 Reputation points Microsoft Employee
    2020-07-21T23:37:50.297+00:00

    @marbunasells-1793 Since your CEO needs to be a Global Admin and to enable MFA, you need Global admin privileges, I tested/confirmed if a Global admin can delete another Global admin, and found that it's possible. However, if your IT-man accidently deletes your CEO/ any other user from Azure AD, you can easily recover that deleted user if it's within 30 days. If it's greater than 30 days, neither you nor Microsoft support can restore a permanently deleted user.

    Restore or remove a recently deleted user using Azure Active Directory 13255-deletedusers.jpg

    If you'd like to restrict administrator role permissions you can view our documentation for our built-in roles.

    Please let me know if you have any other questions. Thank you for your time!

    If any reply/answer helped resolve your question, please remember to "mark as answer" so that others in the community facing similar issues can easily find the solution.