Access is granted only to the extent needed to carry out the agreed work. Your company retains control of its environment and the permissions it assigns.
How do we agree access rules?
Texere’s approach includes a data processing agreement and documented changes. Permissions should match the tasks involved, rather than being broader by default. Administrator access can be revoked. When the service ends, plan the handover of connections and processes as well, so that essential operations continue.
Related terms
See also: Microsoft 365 administration.
Sources: Microsoft Learn — least privilege.