| title | tooManyGlobalAdminsAssignedToTenantAlertIncident resource type |
|---|---|
| description | Represents the details of an alert incident that is triggered if there are too many accounts assigned the Global Administrator role in the tenant. |
| author | rkarim-ms |
| ms.localizationpriority | medium |
| ms.subservice | entra-id-governance |
| doc_type | resourcePageType |
| toc.title | Too many Global Administrators |
| ms.date | 09/19/2024 |
| ms.custom | sfi-ga-nochange |
Namespace: microsoft.graph
[!INCLUDE beta-disclaimer]
Represents the details of an alert incident that is triggered if there are too many accounts assigned the Global Administrator role in the tenant. Global Administrator is the highest privileged role in Microsoft Entra ID. If an account with global administrator privileges is compromised, the malicious actor has permissions for almost all actions in the tenant, which puts the entire tenant at risk.
The threshold that triggers this incident when its reached is defined in the tooManyGlobalAdminsAssignedToTenantAlertConfiguration resource type.
Inherits from unifiedRoleManagementAlertIncident.
None.
For the list of API operations for managing this resource type, see the unifiedRoleManagementAlertIncident resource type.
| Property | Type | Description |
|---|---|---|
| assigneeDisplayName | String | Display name of the subject that the incident applies to. |
| assigneeId | String | The identifier of the subject that the incident applies to. |
| assigneeUserPrincipalName | String | User principal name of the subject that the incident applies to. Applies to user principals. |
| id | String | The identifier for the alert incident. For example, it could be a role assignment ID if the incident represents a role assignment. Inherited from entity. Supports $filter (eq, ne). |
None.
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.tooManyGlobalAdminsAssignedToTenantAlertIncident",
"id": "String (identifier)",
"assigneeId": "String",
"assigneeDisplayName": "String",
"assigneeUserPrincipalName": "String"
}