Azure Global Admin Created Duplicate user after AD sync

Question

I created our Microsoft 365 Tenant using my work email, thus created a user in the cloud, and this account is our original global administrator. When I began syncing Azure AD Cloud Connect, it created a second user (this one on prem). This is the account I use to login and access email etc.

We are preparing to move our mailboxes to the cloud soon and am worried this will cause conflicts, Even thought the "user principal name" is different. I've tried researching If I can change the user principal name on the global admin account to something generic like administrator, or even deleting it after making a new global admin account. Then I could delete the numbers from my on prem account so they sync properly when mail is moved to the cloud.

I haven't found anyone else with this issue, and am afraid to make changes to the original global admin. I've read there are some setting that only they are able to change.

Answer 1

Hi, Jonathan

I don't believe this will cause a technical issue (as the UPN will be different); it could, however, leave to some confusion.

You could move your on-prem user into an OU that isn't getting synced to AAD, then delete the Synced account

It is best practice (if your on-prem accounts are compromised, it doesn't spread straight into Azure, as they are seperate accounts and not tied if anything stop syncing etc) to have Cloud admin accounts as Cloud accounts, so could work well with that.