Comment

Comment by pcaharrier

Notice that the email from the deputy CIO mentions SCuBA.This is the "Secure Cloud Business Application Project" from CISA.If you look at two of the required policies you will find this:

"A minimum of two users and a maximum of eight users SHALL be provisioned with the Global Administrator role."[1]

and

"Privileged users SHALL be provisioned with finer grained roles instead of Global Administrator."[2]

So at least for the agency-wide removal of security administrator roles, that would seem to be unrelated to anything DOGE was doing. The NLRB was supposed to be doing that anyway.

[1] https://www.cisa.gov/resources-tools/services/m365-entra-id#... [2] https://www.cisa.gov/resources-tools/services/m365-entra-id#...

parent pcaharrier 1 year ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton