PRACTICAL WORKBOOK
Least privilege: administrator access should not be your everyday identity
Reduce unnecessary permissions and regularly review who still needs access.
01 / Define the scope
02 / Check and Record Evidence
Confirm the scope first, then expand each item to check it. For 'Completed', enter an owner and evidence; for 'Not applicable', enter a reason. Progress reflects record status only, not a security score.
Data is processed only on this page and is not uploaded or saved automatically. Before leaving, download the HTML and confirm it has been saved; open that file later to continue. Do not enter passwords, verification codes or complete sensitive configurations.
Expand one item to focus on it, or view all items at once. Printing includes every item.
Specify required tasks and the corresponding minimum permissions
PendingMore information needed
Check your environment against this guide and official documentation. Record actual findings and differences that need follow-up.
Suggested evidence: configuration or change record number, test date, results and reviewer.
Separate everyday and administrative accounts; assess on-demand access
PendingMore information needed
Check your environment against this guide and official documentation. Record actual findings and differences that need follow-up.
Suggested evidence: configuration or change record number, test date, results and reviewer.
Review roles regularly and revoke access that is no longer needed
PendingMore information needed
Check your environment against this guide and official documentation. Record actual findings and differences that need follow-up.
Suggested evidence: configuration or change record number, test date, results and reviewer.