Post

I may need an intervention... I'm pretty sure I just said "user-based service accounts are better than service principals, actually"... and in the given context, it was 100% true Service Principals have some really dumb limitations that make user accounts a better fit 🥴

14/5/26, 2:45 am0 reposts6 likes

R Sitze

@rd.sitze.net

14 May

It's really all about the use case, and the limits and mitigations that can apply. I'll allow user based service accounts if the application really needs that, and we can apply a trusted location to it for example.