The original post: /r/cybersecurity by /u/PassageMindless9260 on 2024-11-06 18:19:38.

Hey guys, I was wondering how you have navigated providing third parties with access to your environment for business such as Contractors and Consultants. We are an AD/EntraID Environment and we have been providing all contractors will full M365 accounts; however, I am not sure this is the correct way to go.

1. It costs us monthly to maintain their account in terms of licensing + labor on the HelpDesk

2. We can still apply conditional access to guest accounts

How have you guys navigated this? Would love to hear your thoughts and recommendations.