Language:
Administrators have elevated privileges by definition. They can pose security risks when there is a high number of them since it increases the attack surface because there is a higher chance that one of them gets compromised. This is also the sign that the least-privileged principle is not respected.
These role assignees should be scrutinized, trained and carefully justified.
To limit risks, use the least-privilege principle when assigning administrator roles:
If this is not applicable due to the large size of your IT organization, consider increasing the maximum number of allowed accounts in the Indicator of Exposure options.
In particular, Microsoft recommends to limit the number of Global Administrators to less than 5.
Name: High Number of Administrators
Codename: HIGH-NUMBER-OF-ADMINISTRATORS
Severity: High
Techniques: T1069.003, T1078.004
More: Azure AD built-in roles