== Ask Yourself Whether * The user, group, or service principal doesn't use the entirety of this extensive set of permissions to operate on a day-to-day basis. * It is possible to follow the Separation of Duties principle and split permissions between multiple users, but it's not enforced. There is a risk if you answered yes to any of these questions.