Protect your administrator accounts in Microsoft 365 Business Premium

Je li ova stranica od pomoći?

Imate dodatne povratne informacije?

Povratne informacije će biti poslane kompaniji Microsoft: pritiskom na dugme za slanje, vaše povratne informacije će se koristiti za unapređivanje proizvoda i usluga kompanije Microsoft. Pravila privatnosti.

Because admin accounts come with elevated privileges, they're valuable targets for hackers and cyber criminals. This article describes:

• How to set up an additional administrator account for emergencies.
• How to protect these accounts.

When you sign up for Microsoft 365 and enter your information, you automatically become the Global Administrator (also referred to as the Global admin). A Global admin has the ultimate control of user accounts and all the other settings in the Microsoft admin center (https://admin.microsoft.com), but there are many different kinds of admin accounts with varying degrees of access. See about admin roles for information about the different access levels for each kind of admin role.

Create additional admin accounts

Use admin accounts only for administration. Admins should have a separate user account for regular use of Office apps and only use their administrative account when necessary to manage accounts and devices, and while working on other admin functions. It's also a good idea to remove the Microsoft 365 license from the admin accounts so you don't have to pay for them.

You'll want to set up at least one additional Global admin account to give admin access to another trusted employee. You can also create separate admin accounts for user management (this role is called User management administrator). For more information, see about admin roles.

To create additional admin accounts:

1. Go to the Microsoft 365 admin center and then choose Users > Active users in the left nav.

   

2. On the Active users page, select Add a user at the top of the page.

3. In the Add a user panel, enter basic information such as name and username information.

4. Enter and set up Product licenses information.

5. In Optional settings, define the role of the user, including adding Admin center access if appropriate.

   

6. Finish and review your settings and select Finish adding to confirm the details.

Create an emergency admin account

You should also create a backup account that isn't set up with multi-factor authentication (MFA) so you don't accidentally lock yourself out (for example if you lose your phone that you're using as a second form of verification). Make sure that the password for this account is a phrase or at least 16 characters long. This is often referred to as a "break-glass account."

Create a user account for yourself

Use your user account to participate in collaboration with your organization, including checking mail. This means your admin credentials might be similar to Alice.Chavez@Contoso.org, for example, and your regular user account might be similar to Alice@Contoso.com.

To create a new user account:

1. Go to the Microsoft 365 admin center and then choose Users > Active users in the left nav.

2. On the Active users page, select Add a user at the top of the page, and on the Add a user panel, enter the name and other information.

3. In the Product Licenses section, select the check box for Microsoft 365 Business Premium (no administrative access).

4. In the Optional settings section, leave the default radio button selected for User (no admin center access).

5. Finish and review your settings and select Finish adding to confirm the details.

Additional recommendations

• Before using admin accounts, close out all unrelated browser sessions and apps, including personal email accounts. You can also use in private, or incognito browser windows.

• After completing admin tasks, be sure to sign out of the browser session.

Next objective

Take the steps to turn on security defaults.