Control: ism-1833; Revision: 0; Updated: Mar-23; Applicability: ALL; Essential Eight: N/A ​

Service accounts are provisioned with the minimum privileges required and are not members of the domain administrators group or similar highly privileged groups.