Microsoft Lighthouse GDAP Configuration
Software as a Service
NoCategory
Cloud & InfrastructureClients
Greene IS
Techstack
Microsoft LighthouseAzure
Purpose
Implement Granular Delegated Admin Privileges (GDAP) through Microsoft 365 Lighthouse so administrative access to client tenants is scoped to exactly the roles each task requires.
Description
The engagement replaced broad delegated admin access with GDAP relationships configured in Microsoft 365 Lighthouse, mapping security groups to least-privilege Entra roles per client tenant. This limits each administrative role to only the permissions it needs, shrinking the blast radius of a compromised account while keeping multi-tenant management workflows intact. The result is a cleaner, auditable access model across all managed tenants.
