Granting Tech Business folks Admin role
cybersecurityaccess managementleast privilegeadmin rolesgovernancerisk managementPower PlatformIT security
A manager granted a Power Platform Admin role to a tech business user outside their team, despite the user already having a sys admin role sufficient for their use cases. The poster is concerned about least privilege principles and plans to discuss governance and security alignment with their manager, who is new to IT. The poster is asking whether risk acceptance or proper documentation would be the appropriate path forward.