Source
Retention, AI training & administration — found from sitemap — Sally
Checked for Sally on 5 Nov 2026
- Page
- https://help.sally.io/privacy/admin-access-control/
- Checked
- 5 Nov 2026, 14:19 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:79f0d18688d8d1e3f34debd5c2a8a38b2689c139e84eaf6cf4a86c15ee7b7ac5
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Admin access channel Report an error
“Access channel VPN + MFA”
-
Admin endpoints Report an error
“Endpoint model Managed only”
-
Admin authorization Report an error
“Authorisation RBAC + Least Privilege”
-
Break glass Report an error
“Break-glass Entra ID, isolated”
-
Admin scope Report an error
“Production application components, infrastructure and cloud resources, admin UIs and configuration interfaces, monitoring and logging systems, databases and storage, and any security-relevant admin interface.”
-
Admin vpn Report an error
“Remote admin traffic is tunneled through the corporate VPN. Direct exposure of admin surfaces to the public internet is not allowed.”
-
Admin MFA Report an error
“MFA is mandatory for every administrative and system-side login.”
-
Admin rbac Report an error
“Rights are granted by role and limited to the minimum needed for the task.”
-
Admin managed endpoints Report an error
“All workstations are centrally managed via Microsoft Intune. Non-corporate or non-compliant devices are excluded.”
-
Admin defender Report an error
“Advanced threat detection and response is active on every managed device, alongside Defender Antivirus.”
-
Admin conditional access Report an error
“Administrative access is restricted to compliant devices and the correct access conditions via Entra Conditional Access.”
-
Admin logging Report an error
“Administrative activity is logged via Entra ID sign-in and audit logs, Microsoft 365 unified audit log, Intune audit logs, Defender security logs, and platform-specific event logs.”
-
Admin no bastion Report an error
“a dedicated bastion or jump host and a physically separate management network are not implemented today.”
-
Break glass protection Report an error
“For emergency scenarios (regular admin accounts unavailable, MFA provider outage), dedicated break-glass accounts exist inside Microsoft Entra ID. They are separately protected, restricted to a very small authorised group, are not used in normal operations, and every sign-in and use is logged via Entra ID sign-in and audit logs.”
-
Privilege review Report an error
“Because administrative activity is continuously monitored and logged, no separate cyclical review process for privileged accounts runs today.”
-
Privilege approval Report an error
“Technical leadership approves administrative rights and also revokes them, in particular on staff departure, role change, or when the authorisation is no longer required.”
-
Operating entity Report an error
“Copyright © 2026 Aliru GmbH”
Scores citing this record
- The Management Consultant Retention, AI training & administration
- The Data Protection Officer Retention, AI training & administration
- The Skeptic Retention, AI training & administration