cyber.hendryadrian.com
Security Report · acronis.com

Acronis Finds Few Customers Use Specialized Roles to Limit Cloud-Platform Access

· Original article ↗

Summary

Acronis telemetry shows only about 4.8% of customer tenants use a fitted specialty role, while 33.9% have no local administrator. The company urges customers and MSPs to adopt role-based access control for least privilege.

Key points

  • About 4.8% of active customer tenants have granted at least one fitted specialty role; roughly 1.15% use two or more.
  • About 33.9% of customer tenants have no local administrator because they are managed from the partner level.
  • Protection administrator is the most-used customer specialty role, at 2.41% of tenants; cyber administrator is used by 0.58%.
  • Security analyst appears in 0.10% of customer tenants, averaging about 14 named analysts where used, often for MDR operations.
  • Partner Portal roles are used in about 3.35% of partner tenants; administrator is the most adopted at 2%.
  • Acronis recommends assigning roles matched to job needs, limiting default administrator access, and reviewing entitlements quarterly.

Article Details

Publisher
Acronis
Scope
Adoption of built-in role-based access controls across active Acronis Cyber Protect Cloud customer and partner tenants, including regional adoption rates.
Sample Size
Not disclosed
Key Statistics
  • About 4.8% of active customer tenants had granted at least one fitted specialty role; roughly 95.2% had not.
  • About 1.15% of active customer tenants had granted two or more fitted specialty roles.
  • About 33.9% of customer tenants had no local administrator account and were administered from the managing partner level.
  • About 3.35% of partner tenants had granted at least one Partner Portal role; about 0.74% had granted two or more.
  • Regional cyber administrator adoption was highest in South Africa (14.9%), Mexico (14.3%), and Brazil (13.5%); these rates use a narrower endpoint-deployed, geolocated customer base.
Recommendations
  • Limit default company administrator access to one or two users and assign other users fitted roles appropriate to their duties.
  • For MSP administration, document role mappings by customer tier and use partner-side roles for partner staff and customer-side fitted roles for access to customer tenants.
  • Review customer access entitlements quarterly.
  • Ask MSPs which built-in roles their technicians use and how often access entitlements are reviewed; request fitted roles for routine work and reserve full administrator access for break-glass situations.

Vendors

AcronisAcronis Threat Research Unit

Products

Acronis Cyber Protect CloudSP 800-207 Zero Trust Architecture makes it the default posture rather than the exception. Acronis Cyber Protect Cloud ships with a catalog of built-in roles for exactly this

Countries

Australia(6.8%) and Australia (6.29%).Brazil(14.9%), Mexico (14.3%), Brazil (13.5%), Italy (12%) and the United StatesCanadaStates, Australia, the Netherlands and Canada top this list — markets where MDRColombia(11.7%). Security Analyst adoption is led by Colombia (8%), the United StatesItaly(14.9%), Mexico (14.3%), Brazil (13.5%), Italy (12%) and the United StatesMexico(14.9%), Mexico (14.3%), Brazil (13.5%), Italy (12%) and the United StatesNetherlandsStates, Australia, the Netherlands and Canada top this list — markets where MDRSouth Africadiscipline has taken hold. Cyber administrator adoption is led by South AfricaUnited States(14.9%), Mexico (14.3%), Brazil (13.5%), Italy (12%) and the United States

Related Articles