Query: 1.25 Ensure fewer than 5 users have global administrator assignment

Description

This recommendation aims to maintain a balance between security and operational efficiency by ensuring that a minimum of 2 and a maximum of 4 users are assigned the Global Administrator role in Microsoft Entra ID. Having at least two Global Administrators ensures redundancy, while limiting the number to four reduces the risk of excessive privileged access.

Query

Tables used in this query:

• azure_tenant
• azuread_directory_role

Controls using this query:

• 1.25 Ensure fewer than 5 users have global administrator assignment
• 2.26 Ensure fewer than 5 users have global administrator assignment

SQL