B2High9 accounts
Standing privileged assignments, all roles
Beyond Global Administrator, seven further roles carry permanent assignments. Each is a right that exists whether or not any work requires it that day.
Evidence
| Account | Role | Assignment | Last used |
|---|---|---|---|
| adm.jsandvik@vestholm.no | Global Administrator | Permanent | 18 Aug 2026 |
| h.tveitan@vestholm.no | User Administrator | Permanent | 15 Aug 2026 |
| m.brenna@vestholm.no | Exchange Administrator | Permanent | 06 Jul 2026 |
| s.ulvang@vestholm.no | Intune Administrator | Permanent | 13 Aug 2026 |
| o.grimsrud@vestholm.se | Security Administrator | Permanent | 21 Mar 2026 |
Showing 5 of 9 rows · full list in the export
How this was derived
assignmentType = 'Assigned' AND roleDefinition.isPrivileged = true
- Role assignments read
- 61
- Permanent assignments
- 9
If closed
+3 points9 standing assignments removedEvery privileged action tied to an order
Fix
Move each role behind the order flow, so the right appears when an approval exists and disappears when the order closes.
requires write access
Related findings