Cybersecurity · Advanced level

Advanced level · Module 4: Identity, Email and Cloud Security · Lesson 2 of 4

Privileged and Third-Party Access

Control the accounts that can do the most damage.

In this lesson you will

  • Design separate admin accounts
  • Control and review third-party access

Key concepts

separate admin accountsbreak-glass accountsaccess reviewscontractor access

The lesson

Administrators use separate admin accounts for admin tasks only, with the strongest MFA; their everyday accounts have no admin rights.

Keep one or two emergency (break-glass) accounts with very strong credentials stored securely and monitored.

Review admin and third-party access every quarter; give contractors time-limited access to only what they need.

Step by step

  1. List current admins.
  2. Design separate admin accounts.
  3. Define break-glass accounts.
  4. Write the quarterly access review.

Practice activity

Design the privileged access model for the case NGO.

Expected result: A model with separated admin accounts and review routine.

Check your understanding

  1. Why use separate admin accounts?

    Show answer

    So everyday activity such as email cannot directly use admin rights.

  2. How often should admin access be reviewed?

    Show answer

    At least quarterly.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.