What the survey found, floor by floor

10 failing · 3 partial · 13 passing

FailIDN-008

Admin roles are not held by everyday (mail-enabled) accounts

3 admin role holder(s) also use the account for mail and daily work.

Estate exposed: 100%
Affected: 3
Place in plan: 9

Routes using it: Administrator compromise to full tenant takeover
Cyber Essentials: CE-UAC-ADMIN
ISO 27001: A.8.2
Read from: demo:roles

Affected · 3

eleanor.finch@harbourfinch.examplemarcus.harbour@harbourfinch.examplepriya.shah@harbourfinch.example

Facts recorded

{
  "privileged_licensed": [
    {
      "upn": "eleanor.finch@harbourfinch.example",
      "roles": [
        "Global Administrator"
      ]
    },
    {
      "upn": "marcus.harbour@harbourfinch.example",
      "roles": [
        "Global Administrator"
      ]
    },
    {
      "upn": "priya.shah@harbourfinch.example",
      "roles": [
        "Exchange Administrator"
      ]
    }
  ]
}

See the fix in the plan