Jun 22, 2020 · The centralized administration model in Microsoft 365 allows all administrators to have global credentials, which grant access to every user’s account and content. If hackers manage to take over a global admin account, they can change critical settings, steal valuable data and leave backdoors to enter again.
May 11, 2015 · The user management admin can’t delete a global admin, create other admin roles, or reset passwords for billing, global, and service admins. For more information on which services the permissions extend to, and to view admin permissions by role, visit the Office 365 help page.
Internal admin takeover Some products that include SharePoint and OneDrive, such as Microsoft 365, do not support external takeover. If that is your scenario, or if you are an admin and want to take over an unmanaged or "shadow" Azure AD organization create by users who used self-service sign-up, you can do this with an internal admin takeover.