Supporting technical capability
Set up and test emergency administrator access to Microsoft 365.
Create and protect emergency access accounts in Entra ID. Test the agreed recovery scenarios and document when and how your administrators should use them, including any limits.
Engagement context
Where this capability applies.
- A lockout scare or an audit finding flagged the lack of emergency access.
- You have no documented way back in if Conditional Access or MFA breaks.
- An emergency account exists, but nobody has tested it or set an alert for when it is used.
The agreed outputs
What the engagement provides.
Emergency Access Runbook
Two emergency accounts, excluded from your Conditional Access rules, protected with hardware keys, alerting on sign-in, and documented.
Tested lockout drill
A simulated lockout proving the accounts actually work.
Alerting on use
Sign-in alerting configured so a break-glass sign-in raises an alert to the destination your team names.
Worked example
Emergency Access Runbook
An illustration of the record an engagement can produce. Names and figures are constructed for this example.
Illustrative content. The engagement record is developed from the client’s own environment and agreed scope.
Commercial & delivery basis
The scope and conditions of the work.
Delivery window
1 day
Included scope
- Two emergency access accounts
- Conditional Access exclusion and hardware-key protection
- Sign-in alerting
- Tested runbook
Scope assumptions
- One Microsoft Entra ID tenant
Exclusions
- Broad identity redesign
- Privileged access management rollout
- Hardware security key purchase
- Watching the alert once it is configured, which stays with your team or your monitoring provider
Required access
- Entra ID admin access
- Two hardware security keys
- A 30-minute kickoff with IT
Acceptance
The agreed completion standard.
The engagement is complete when the two accounts are created, protected, tested, and the runbook is delivered.
Discuss the work
Tell us what you need to change.
Share the systems involved, why the change is needed and your deadline. We clarify the work, responsibilities and information needed for a proposal.
Request an Architecture Briefing