Some of our API integrations are being run by the "Admin" user.
I assume that this is not best practice, and that we should create a separate service user for every integration.
However, do Microsoft have any best practice documentation for these things? I was not able to find it on Microsoft learn
Are there any risks of running them on the Admin-user, which have the system admin security role?
It is definitely not best practice to run the integrations as Admin because the Admin role has access to all data in the system. The integration accounts should not have access to more data than necessary.
André Arnaud de Cal...
292,111
Super User 2025 Season 1
Martin Dráb
230,934
Most Valuable Professional
nmaenpaa
101,156