The Best Rated EmaiI Signature Portal

Home Submit a ticket My Tickets
Welcome
Login  Sign up
  1. Discussions
  2. Share an idea or improvement
  3. I have a suggestion

Global Admin role for xink connect should be removed

P
Per Frandsen
started a topic 29 days ago

 HI,

Would it be possible to reduce the role for the XinkConnect user in O365 from Global Admin to something safer. This user is not MFA enabled and should therefore not be Global Admin.

Please find a way to ensure either OAuth or MFA and reduces role for the XinkConnect user.

  • Waylord Punzalan
    said 29 days ago

    Hi Per,


    Thanks for reaching to us.


    When you say XinkConnect, are you referring to our Office 365 server-side rerouting? If so, it is not possible to run Create/Remove/Validate commands without having a Global Admin or Exchange admin permissions as this requires  access to transport rules and connectors. However, this permission is only required when you perform the said actions. This means you can reduce the access of whatever admin user account you used while you do not require any changes to the setup. But every time you make some changes with the integration, the role has to be set back.


    Does this answer your question?

Login or Signup to post a comment
Topics in this forum
View all (118)

Didn't find what you were looking for?

Start a new topic

Search articles