Problem solve Get help with specific problems with your technologies, process and projects.

Should the CTO have domain administrator access?

Should a CTO or SVP of technology have domain administrator access? In this identity and access management expert response, learn whose job description should include domain administrator privileges.

Is it standard for the CTO or SVP of technology to have domain administrator privileges?

This depends on the size of the company; a CTO may have a broad range of responsibilities, which may require elevated...


A better way to assess appropriate privileges is to think in terms of job responsibilities. Do the day-to-day responsibilities of the CTO or SVP of technology require domain administrator privileges? If so, it is appropriate; if not, the security manager should limit his or her account privileges to the minimum required to do the job, just as everyone else in the company should.

The CTO should understand the concept of access appropriate to role and limiting account privileges. There should be a process in place to evaluate every privileged account on a periodic basis. In doing this, you take away the subjectivity of the conversation and introduce an objective process based on sound business requirements.

More information:

This was last published in December 2008

Dig Deeper on Privileged access management