Description:
Verifies the Hybrid user accounts with permanent high privileged roles condition in the customer's Microsoft 365 tenant. This check is sourced from the Maester test MT.1026; see the Maester test reference for the full test logic.
Why:
Global Administrator (and other privileged groups) accounts should be cloud-only accounts with no ties to on-premises Active Directory.
Status detail shown in Augmentt: Hybrid users
This check reports a count rather than a simple pass/fail. It is Configured when every in-scope item is compliant, Partially Configured when some are, and Not Configured when none are.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Identity
Microsoft Licensing: Works with Basic licensing
Secure Score Impact: Not verified. No Microsoft Secure Score control could be confirmed for this setting from published sources. See the note in README.md before publishing this field.
Remediation in Augmentt: No in-product remediation — remediate in the Microsoft admin portals.
Compliance Frameworks:
Essential Eight (Maturity Level 1) — 0445
Essential Eight (Maturity Level 2) — 0445
Essential Eight (Maturity Level 3) — 0445
CIS Microsoft 365 Benchmark v6 (Level 1) — 1.1.1
CIS Microsoft 365 Benchmark v7 (Level 1) — 1.1.1
Microsoft documentation: