Can I remove the Global Admin from the Workspace?
Yes, but.... We use the Global Admin in the Workspace for:
- Creating the Single Sign On App Registration within Azure AD.
- User Management.
- Connect via PowerShell to Exchange On-Prem to get the GAL of the users.
If you already did set up Single Sign On, doing User management via our Azure AD Synctool, yes in that case you can remove Global Admin from the Workspace. But keep in mind that when you need to make changes to one of these items, you will need to have an Global Admin in the Workspace.
We recommend to always keep a service account in the Workspace and instead of removing this user, remove the role for this user. Or you could even make this user inactive so you won't be billed for this user.