You’re offline. This is a read only version of the page.
318
Some of our API integrations are being run by the "Admin" user.
I assume that this is not best practice, and that we should create a separate service user for every integration.
However, do Microsoft have any best practice documentation for these things? I was not able to find it on Microsoft learn
Are there any risks of running them on the Admin-user, which have the system admin security role?
It is definitely not best practice to run the integrations as Admin because the Admin role has access to all data in the system. The integration accounts should not have access to more data than necessary.
Share
Report
All responses (
Answers (
