365 Administrator with licences attached

Title of the alert: “Administrator with Licenses attached”

Description: Alerts when a user with 365 Administrator privileges has a license attached, indicating the login may be used for day to day activity as well as administrative purposes.


  • Usernames can be ignored

The problem: This alert is triggered when an account with a license also has an Administrative role.

Impact: An administrative account used for normal activities is at higher risk in the event of a compromise. Any intrusions with this level of permission will then be potentially far more damaging, giving greater access than a normal user account.

Suggested steps: Engage a technician to confirm that the alert is accurate, and if so then work with the technician to setup dedicated logins for administrative tasks (that are not otherwise used in the normal day-to-day activities).