Fabick — Privileged Access Posture

81 privilege holders · 15 with standing Tier-0 · 29 with standing Tier-1 · cached ≤5 min

Hardening opportunities

ACTVBATCH holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
actvO365 holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
Andy Maurer holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
Azure Admin - Mitchell Tobin holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
Cyberark Microsoft Azure Password Management holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
David Pfeiffer holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
David Pfeiffer - GA holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
Dawn Aldridge holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
Dawn Aldridge holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
DirSync Service holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
Everett Curry holds standing high-tier privilege: Intune Administrator, Privileged Authentication Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Keith Lehmann holds standing high-tier privilege: Intune Administrator, Privileged Authentication Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Managed O365 - Private Account holds standing high-tier privilege: Privileged Authentication Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Neil Scott holds standing high-tier privilege: Exchange Administrator, Global Administrator — consider making this PIM-eligible (activate-on-demand).
Neil Scott holds standing high-tier privilege: Global Administrator — consider making this PIM-eligible (activate-on-demand).
[PG]-Agentic-AI-Publisher holds standing high-tier privilege: Cloud Application Administrator — consider making this PIM-eligible (activate-on-demand).
[PG]-TelephonyMobile-ADM holds standing high-tier privilege: Authentication Administrator, Groups Administrator, Intune Administrator, Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Andrew Mosyagin holds standing high-tier privilege: Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
AvePoint Policies for Microsoft365 holds standing high-tier privilege: Exchange Administrator — consider making this PIM-eligible (activate-on-demand).
Azure Admin - Turner Kelley holds standing high-tier privilege: SharePoint Administrator — consider making this PIM-eligible (activate-on-demand).
Brian Blackburn holds standing high-tier privilege: Teams Administrator — consider making this PIM-eligible (activate-on-demand).
Brian Blackburn-Bartholomew holds standing high-tier privilege: Teams Administrator — consider making this PIM-eligible (activate-on-demand).
Chandrakant Bhise holds standing high-tier privilege: Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Dan Abernathy holds standing high-tier privilege: Exchange Administrator, SharePoint Administrator, Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Deep Kumar holds standing high-tier privilege: Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
ExO PowerShell CBA holds standing high-tier privilege: Exchange Administrator — consider making this PIM-eligible (activate-on-demand).
Gabriel Lonescu holds standing high-tier privilege: Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Intune Enrollment holds standing high-tier privilege: Intune Administrator — consider making this PIM-eligible (activate-on-demand).
Jason Guel holds standing high-tier privilege: Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Jeffrey Trigueros holds standing high-tier privilege: Exchange Administrator — consider making this PIM-eligible (activate-on-demand).
Josh Holman holds standing high-tier privilege: SharePoint Administrator — consider making this PIM-eligible (activate-on-demand).
LINQ holds standing high-tier privilege: Authentication Administrator — consider making this PIM-eligible (activate-on-demand).
Managed O365 - BAU Account holds standing high-tier privilege: User Administrator — consider making this PIM-eligible (activate-on-demand).
Managed O365 - Configuration Backup Account holds standing high-tier privilege: Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
mike.russell holds standing high-tier privilege: Teams Administrator — consider making this PIM-eligible (activate-on-demand).
Mirielle Roubaud holds standing high-tier privilege: Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Nahal Mousavi holds standing high-tier privilege: Exchange Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Sara Dinkins holds standing high-tier privilege: Authentication Administrator, Authentication Policy Administrator, Exchange Administrator, Groups Administrator, Intune Administrator, SharePoint Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Shashank Singh holds standing high-tier privilege: Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Troy Dallas holds standing high-tier privilege: Intune Administrator, Teams Administrator — consider making this PIM-eligible (activate-on-demand).
Tyler Duffy holds standing high-tier privilege: Authentication Administrator, Authentication Policy Administrator, Exchange Administrator, Groups Administrator, Intune Administrator, SharePoint Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Veronica Martinez holds standing high-tier privilege: Teams Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Will Khotsyphom holds standing high-tier privilege: Exchange Administrator, User Administrator — consider making this PIM-eligible (activate-on-demand).
Zadd2exchange holds standing high-tier privilege: Exchange Administrator — consider making this PIM-eligible (activate-on-demand).

Tier	Principal	Type	Posture	Roles
Tier 0 — Catastrophic	ACTVBATCH	User	STANDING	Global Administrator standing
Tier 0 — Catastrophic	actvO365	User	STANDING	Global Administrator standing
Tier 0 — Catastrophic	Andy Maurer	User	STANDING	Global Administrator standing
Tier 0 — Catastrophic	Azure Admin - Andy Maurer	User	elevatable	Global Administrator elevatable
Tier 0 — Catastrophic	Azure Admin - David Pfeiffer	User	elevatable	Global Administrator elevatable
Tier 0 — Catastrophic	Azure Admin - Glen Sager	User	elevatable	Global Administrator elevatable
Tier 0 — Catastrophic	Azure Admin - Mitchell Tobin	User	STANDING elevatable	Global Administrator elevatable Global Administrator activated
Tier 0 — Catastrophic	Cyberark Microsoft Azure Password Management	ServicePrincipal	STANDING	Global Administrator standing
Tier 0 — Catastrophic	David Pfeiffer	User	STANDING	Global Administrator standing Attribute Assignment Administrator standing Attribute Definition Administrator standing Azure DevOps Administrator standing Purview Workload Content Administrator standing
Tier 0 — Catastrophic	David Pfeiffer - GA	User	STANDING	Global Administrator standing
Tier 0 — Catastrophic	Dawn Aldridge	User	STANDING	Global Administrator standing Purview Workload Content Administrator standing
Tier 0 — Catastrophic	Dawn Aldridge	User	STANDING	Global Administrator standing
Tier 0 — Catastrophic	DirSync Service	User	STANDING	Global Administrator standing
Tier 0 — Catastrophic	Everett Curry	User	STANDING	Privileged Authentication Administrator standing User Administrator standing Intune Administrator standing Global Reader standing Teams Communications Administrator standing Teams Devices Administrator standing
Tier 0 — Catastrophic	Keith Lehmann	User	STANDING	Privileged Authentication Administrator standing Intune Administrator standing User Administrator standing Global Reader standing Teams Communications Administrator standing Teams Devices Administrator standing
Tier 0 — Catastrophic	Managed O365 - Private Account	User	STANDING	Privileged Authentication Administrator standing User Administrator standing
Tier 0 — Catastrophic	Neil Scott	User	STANDING	Global Administrator standing Exchange Administrator standing
Tier 0 — Catastrophic	Neil Scott	User	STANDING	Global Administrator standing
Tier 1 — High	[PG]-Agentic-AI-Publisher	Group	STANDING	Cloud Application Administrator standing
Tier 1 — High	[PG]-TelephonyMobile-ADM	Group	STANDING	User Administrator standing Intune Administrator standing Teams Administrator standing Groups Administrator standing Authentication Administrator standing License Administrator standing Password Administrator standing Exchange Recipient Administrator standing
Tier 1 — High	Amy Zitta	User	elevatable	Intune Administrator elevatable Security Reader elevatable
Tier 1 — High	Andrew Mosyagin	User	STANDING	User Administrator standing Teams Administrator standing Skype for Business Administrator standing
Tier 1 — High	AvePoint Policies for Microsoft365	ServicePrincipal	STANDING	Exchange Administrator standing
Tier 1 — High	Azure Admin - Turner Kelley	User	STANDING	SharePoint Administrator standing
Tier 1 — High	Azure Admin - Zac Christman	User	elevatable	Groups Administrator elevatable
Tier 1 — High	Benjamin Ra	User	elevatable	Intune Administrator elevatable Security Reader elevatable
Tier 1 — High	Brian Blackburn	User	STANDING	Teams Administrator standing
Tier 1 — High	Brian Blackburn-Bartholomew	User	STANDING	Teams Administrator standing Skype for Business Administrator standing
Tier 1 — High	Chandrakant Bhise	User	STANDING	User Administrator standing Teams Administrator standing Skype for Business Administrator standing
Tier 1 — High	Chris Voisey	User	elevatable	Exchange Administrator elevatable Application Administrator elevatable Global Reader elevatable
Tier 1 — High	Dan Abernathy	User	STANDING	Exchange Administrator standing User Administrator standing SharePoint Administrator standing Teams Administrator standing Global Reader standing Service Support Administrator standing
Tier 1 — High	Deep Kumar	User	STANDING	User Administrator standing Teams Administrator standing Skype for Business Administrator standing
Tier 1 — High	ExO PowerShell CBA	ServicePrincipal	STANDING	Exchange Administrator standing
Tier 1 — High	Gabriel Lonescu	User	STANDING	User Administrator standing Teams Administrator standing Skype for Business Administrator standing
Tier 1 — High	Intune Enrollment	User	STANDING	Intune Administrator standing
Tier 1 — High	Isabel Cusick	User	elevatable	SharePoint Administrator elevatable
Tier 1 — High	Jason Guel	User	STANDING	User Administrator standing Teams Administrator standing Skype for Business Administrator standing
Tier 1 — High	Jeffrey Trigueros	User	STANDING elevatable	Exchange Administrator standing Global Reader elevatable
Tier 1 — High	Josh Holman	User	STANDING	SharePoint Administrator standing Power Platform Administrator standing Fabric Administrator standing SharePoint Embedded Administrator standing
Tier 1 — High	LINQ	User	STANDING	Authentication Administrator standing
Tier 1 — High	Lynn Lunik	User	elevatable	SharePoint Administrator elevatable Application Administrator elevatable Authentication Administrator elevatable
Tier 1 — High	Managed O365 - BAU Account	User	STANDING	User Administrator standing Skype for Business Administrator standing Teams Communications Administrator standing
Tier 1 — High	Managed O365 - Configuration Backup Account	User	STANDING	User Administrator standing Teams Administrator standing Security Reader standing Skype for Business Administrator standing
Tier 1 — High	Mike Niccum	User	elevatable	User Administrator elevatable
Tier 1 — High	mike.russell	User	STANDING	Teams Administrator standing
Tier 1 — High	Mirielle Roubaud	User	STANDING	User Administrator standing Teams Administrator standing Skype for Business Administrator standing
Tier 1 — High	Nahal Mousavi	User	STANDING	Exchange Administrator standing User Administrator standing Helpdesk Administrator standing
Tier 1 — High	Sara Dinkins	User	STANDING	Intune Administrator standing Exchange Administrator standing Authentication Administrator standing Groups Administrator standing User Administrator standing SharePoint Administrator standing Authentication Policy Administrator standing Helpdesk Administrator standing License Administrator standing Security Operator standing Security Reader standing
Tier 1 — High	Shashank Singh	User	STANDING	User Administrator standing Teams Administrator standing Skype for Business Administrator standing
Tier 1 — High	Troy Dallas	User	STANDING elevatable	Authentication Administrator elevatable Teams Administrator standing Intune Administrator standing Global Reader standing
Tier 1 — High	Tyler Duffy	User	STANDING	User Administrator standing Intune Administrator standing Exchange Administrator standing Authentication Administrator standing Groups Administrator standing SharePoint Administrator standing Authentication Policy Administrator standing Security Reader standing Helpdesk Administrator standing License Administrator standing Security Operator standing
Tier 1 — High	Veronica Martinez	User	STANDING	User Administrator standing Teams Administrator standing Skype for Business Administrator standing
Tier 1 — High	Will Khotsyphom	User	STANDING	Exchange Administrator standing User Administrator standing Helpdesk Administrator standing
Tier 1 — High	Zadd2exchange	User	STANDING	Exchange Administrator standing
Tier 1 — High	Zy Faulkingham	User	elevatable	Intune Administrator elevatable
Tier 2 — Medium	[PG]-AIDeveloper	Group	STANDING	Global Reader standing Power Platform Administrator standing Insights Administrator standing Insights Business Leader standing Insights Analyst standing AI Administrator standing Agent ID Administrator standing Application Developer standing Agent ID Developer standing
Tier 2 — Medium	[PG]-Azure-PowerPlatformAdm-DataTeam	Group	STANDING	Fabric Administrator standing Power Platform Administrator standing
Tier 2 — Medium	AzureAD PowerShell	ServicePrincipal	STANDING	Global Reader standing
Tier 2 — Medium	AzureADAssessmentGR	User	STANDING	Global Reader standing
Tier 2 — Medium	BVDA-FabickCat	ServicePrincipal	STANDING	Global Reader standing
Tier 2 — Medium	David Pfeiffer - RO	User	STANDING	Global Reader standing
Tier 2 — Medium	Gary Bell	User	STANDING	Global Reader standing
Tier 2 — Medium	Grady Reeser	User	STANDING	Global Reader standing
Tier 2 — Medium	Jeff Simington	User	STANDING	Billing Administrator standing
Tier 2 — Medium	John Petroschek	User	elevatable	Compliance Administrator elevatable
Tier 2 — Medium	Managed O365 - Billing Account	User	STANDING	Global Reader standing
Tier 2 — Medium	Nathan Henry	User	STANDING	Purview Workload Content Administrator standing
Tier 2 — Medium	Nicole Mosca	User	STANDING	Yammer Administrator standing
Tier 2 — Medium	Office 365 Service Trust Portal	ServicePrincipal	STANDING	Directory Writers standing
Tier 2 — Medium	Proofpoint Cloud App Security (includes CAD and CASB)	ServicePrincipal	STANDING	Directory Writers standing Directory Readers standing
Tier 2 — Medium	Teams Collection	User	STANDING	Global Reader standing
Tier 2 — Medium	Zac Christman	User	elevatable	Global Reader elevatable
Tier 3 — Benign	apple mdm - Do not delete. Federation account for Apple Business BYOD	User	STANDING	Directory Readers standing Reports Reader standing
Tier 3 — Benign	azmigrateuser	Group	STANDING	Application Developer standing
Tier 3 — Benign	Jill Burgard	User	STANDING	Usage Summary Reports Reader standing
Tier 3 — Benign	Lookout MTP	ServicePrincipal	STANDING	Directory Readers standing
Tier 3 — Benign	Microsoft Assessments	ServicePrincipal	STANDING	Directory Readers standing
Tier 3 — Benign	Microsoft.Azure.SyncFabric	ServicePrincipal	STANDING	Directory Readers standing
Tier 3 — Benign	MicrosoftAzureActiveAuthn	ServicePrincipal	STANDING	Directory Readers standing
Tier 3 — Benign	Skycure Management	ServicePrincipal	STANDING	Directory Readers standing
Tier 3 — Benign	Viva Engage	ServicePrincipal	STANDING	Directory Readers standing