| ms.author | author | ms.service | ms.topic | ms.date | ms.custom |
|---|---|---|---|---|---|
joflore |
MicrosoftGuyJFlo |
entra-id |
include |
05/10/2024 |
Identity-Managed-Definition |
Microsoft recommends that organizations have two cloud-only emergency access accounts permanently assigned the Global Administrator role. These accounts are highly privileged and aren't assigned to specific individuals. The accounts are limited to emergency or "break glass" scenarios where normal accounts can't be used or all other administrators are accidentally locked out. These accounts should be created following the emergency access account recommendations.