Azure Active Directory Authentication

Over-premissioned identities or workload service accounts are absolutely a big problem. A lot of it has to do with managing it, right? You mentioned that service accounts could be user accounts. There's a reason why Microsoft created back, you know, for the on-premises piece, the managed service accounts. One of my pet peeves is developers thinking they need admin access just to develop software. Most of the time you just don't.