Microsoft Office 365 Portal service principal made global administrator?

[jasonfritts]

After a successful admin takeover of a viral tenant the following service principal is shown as a Global Administrator in the tenant. Can this be documented and confirmation that this service principal can be removed from Global Administrator role and/or deleted entirely without issue?

_ObjectClass (1): ServicePrincipal
AppContextId (1): f8cdef31-a31e-4b4a-93e4-5f571e91255a
AppPrincipalId (1): 00000006-0000-0ff1-ce00-000000000000
DisplayName (1): Microsoft Office 365 Portal

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: cd934d58-08f8-a3ca-2686-0006b0b8f74a
• Version Independent ID: 84d9cab3-09b7-95ba-83ea-435ca0ccbb47
• Content: Admin takeover of an unmanaged directory - Azure AD
• Content Source: articles/active-directory/enterprise-users/domains-admin-takeover.md
• Service: active-directory
• GitHub Login: @curtand
• Microsoft Alias: curtand

[ram-msft]

@jasonfritts Thanks for the feedback! We will review and update accordingly.

[amanmcse]

@jasonfritts This service principal can be safely removed from Global Administrator role after you have assigned this role to a user. As this application is first party app, you won't get an option to delete it using Azure Portal. If you somehow manage to remove this app, you won't be able sign in to office portal. So removing this app is not a good idea.

I'll work with content author if we can incorporate this information in this doc or if there is any other document more suitable for this information.